>"I have since seen an infuriating number of people point to it to claim that passphrases are more secure than random passwords. They are not." It appears you

>"I have since seen an infuriating number of people point to it to claim that passphrases are more secure than random passwords. They are not." It appears you have assumed all passphrases must take the same methodological route as outlined in the xkcd comic. However, 'noozle stroodle' has an entropy of 69.303 [1] The above quotation, is a passphrase, and it's more secure than any 7char printable ASCII password. While I accept your argument that not all pass phrases are necessarily more secure than seven lettered passwords, one cannot rightly make the antithetical claim either. The correct judgement is: It depends [1] According to the JS tester, http://dl.dropbox.com/u/209/zxcvbn/test/index.html http://dl.dropbox.com/u/209/zxcvbn/test/index.html