4 ms·

So you do random capital words, random punctuation and add a number somewhere and you’re at 60. Add more for whatever threat model you’re trying to be secure ag

• eru 2y ago
  The random punctuation sort-of defeats the point, doesn't it? Otherwise, I agree.
  • baq 2y ago
    Not sure; you can use the same character instead of a space and still get a few bits. Of course different ones would be better, but again, depends on how many bits you actually need.
    • eru 2y ago
      I thought the point was to construct a password that's secure enough _and_ easy to remember for humans. Adding random punctuation helps with the former, but might interfere with the latter. (In the extreme case, you just generate completely random strings character for character. That's the most secure, but the least memorable.)
      • baq 2y ago
        > enough key word here, I think we agree ;)