For anyone considering creating private keys, 2^50 is borderline ok, but nowhere near safe to give someone true ownership of something, and I'm not just saying

For anyone considering creating private keys, 2^50 is borderline ok, but nowhere near safe to give someone true ownership of something, and I'm not just saying for some theoretical argument. 2^256 is considered extremely safe (altho arguably not quantum resistant depending on the hashing algo) See Bitcoin bips for an (optionally i18n) list of 2048 words that is fairly standard and several libs can help with implementation. Pick at least 10 words - don't worry, users won't remember either number of words for life, they have to back up somewhere safe anyway. https://github.com/bitcoin/bips/blob/master/bip-0039/bip-0039-wordlists.md https://github.com/bitcoin/bips/blob/master/bip-0039/bip-003...