Elaborate more on passphrase length and strength

[moonwriting]

It depends on what you are securing. For example, we know that Bitwarden uses either PBKDF2 or Argon2, which means that you can safely use even a 4-word passphrase as the calculator by Passwordbits demonstrates.

However, for most sites, we don’t know how they implement these things, and thus, using a 7-word passphrase could still be justified. But for most sites, you should probably just use a randomly generated password instead if you never have to type it out yourself.