> There are a few websites that
> provide strong password generators that make pretty much uncrackable
> passwords.
Password Security:
https://xkcd.com/936/ ;-)
There's no point having passwords that you can't remember; in an office situation it leads to writing them down which is a worse risk; and IMHO, it's very unlikely that anyone will actually "crack" them anyway.
More likely they'll get a keylogger installed on your PC and steal the passwords that way. Or get you via a phishing scam. As for email spoofing, as others have said, it's very easy to fake the "from" address.
Chris