The OP contains one good recommendation regarding password (make that passphrase) length. The rest is rotten advice that should be rubbished. For superior guid

The OP contains one good recommendation regarding password (make that passphrase) length. The rest is rotten advice that should be rubbished. For superior guidance see for ex https://pages.nist.gov/800-63-3/sp800-63b.html https://pages.nist.gov/800-63-3/sp800-63b.html