By all means, strengthen your passwords. But a major flaw in this approach and many others is that there is no validation step at the end. These days, users mus

By all means, strengthen your passwords. But a major flaw in this approach and many others is that there is no validation step at the end. These days, users must ask themselves questions like, "Is the hash of this password likely to be in a rainbow table?" or "If an attacker knows two of my passwords, can they determine the rest?" Any sufficiently random and/or complex approach is still capable of generating weak passwords. Unfortunately, the only question users tend to ask themselves is, "Can another human guess my password?" That's not enough and hasn't been for a long, long time.