Why Passphrases Beat Complex Short Passwords
For decades, users were instructed to create 8-character passwords with bizarre punctuation (e.g. Tr0ub4dor&3). These are notoriously difficult for humans to remember but trivial for modern GPU clusters to crack.
A 5-word Diceware passphrase drawn randomly from a 7,776-word dictionary delivers over 64 bits of pure entropy, taking modern supercomputers centuries to brute-force while remaining effortless to type on mobile devices.