3 ms·
Yes and no. Pass phrases are good, since (if backed by the same amount of entropy) they're easier to remember than passwords. But for $DEITY's sake, don't use
by creshal 10y ago
Yes and no.
Pass phrases are good, since (if backed by the same amount of entropy) they're easier to remember than passwords.
But for $DEITY's sake, don't use sentences. Natural human language has very, very poor entropy – especially since people gravitate towards catch phrases, song lyrics and the like, which can be (and have been[1]) very easily guessed.
That's why I put in diceware as fallback recommendation – while dice aren't perfect, they're a very decent source of entropy.
[1] https://www.leakedsource.com/i/lastfmlong.txt https://www.leakedsource.com/i/lastfmlong.txt