That's not how the protocol works. A single failed guess terminates the connection and alerts the sender that an incorrect code was used and someone might be at

That's not how the protocol works. A single failed guess terminates the connection and alerts the sender that an incorrect code was used and someone might be attacking them. If you are concerned about guessability you can use more than 2 words. You can also use strings that are not in the default word list (the only thing the default word list gives you is tab completions). edit: Also the "wormhole" spec that keys.pub has is not related to magic-wormhole.