Using actual words isn't such a bad thing if what you want to optimize is password entropy at a given level of memorability for naive users.