See also: Steve Gibson's "Password Haystack" https://www.grc.com/haystack.htm https://www.grc.com/haystack.htm > everyone has always believed or been told th

See also: Steve Gibson's "Password Haystack" https://www.grc.com/haystack.htm https://www.grc.com/haystack.htm > everyone has always believed or been told that passwords > derived their strength from having “high entropy”. [...] > But [...] when the only available attack is guessing, > that long-standing common wisdom is not correct! (Practical advice for normal users seems to be Steve's raison d'etre; I would be glad to hear anyone share their concerns about his recommendations.)