The hard part was always password generation. That we’ve spent decades trying to add abstruse rules and training people to “do it right!” rather than provide a

The hard part was always password generation. That we’ve spent decades trying to add abstruse rules and training people to “do it right!” rather than provide a mechanism speaks to the psychology of security people. Buy people a box of tiny dice; have them make a game of a new pass phrase… that they can actually remember. Eg, this box which fits in your palm — and gets ~50bits per shake. https://zmichaelgehlke.com/images/dicebox.jpg https://zmichaelgehlke.com/images/dicebox.jpg