> Or is there something in the password method itself, that is inherently weak? Your 64-character high-entropy password might be safe; other users on your syst

> Or is there something in the password method itself, that is inherently weak? Your 64-character high-entropy password might be safe; other users on your system might baulk at memorising/typing in 64 random chars, and choose a less-secure password instead. With SSH keys, that can't happen.