> So the password iamahorsebatterystaple is about 30x harder to crack than correcthorsebatterystaple using this approach You are massively underselling it. It’

> So the password iamahorsebatterystaple is about 30x harder to crack than correcthorsebatterystaple using this approach You are massively underselling it. It’s n² harder with n being the number of words in your dictionary. (except that "iam" is certainly not two random words) But my point was that varying the number of words virtually doesn't add security — the security of this scheme is defined by the number of words in the dictionary, and the maximum number of words you’re willing to remember. Whether that maximum means "pick MAX words" or "pick at most MAX words" has no real impact.