>even a pass phrase with 12 dictionary words has substantially less entropy than a random key Actually, 12 random dictionary words is incredibly secure. If you

>even a pass phrase with 12 dictionary words has substantially less entropy than a random key Actually, 12 random dictionary words is incredibly secure. If you choose 12 random words from a pool of 100k words, then your entropy is: 100000^12 == 10^60 =~ 2^200 In other words, 200 bits of entropy. It would take an attacker longer than the history of the history of Earth just to count to 2^200. So, even if an attacker knew that your password was 12 random english words, they're never gonna crack it using brute force.