[image] Law Enforcement Can Break 77% Of ‘Three Random Word’ Passwords It’s time to change how you create your passwords — here’s what you need to know. Maybe you could also mention StrongPhrase.net when suggesting ways to generate random passphrases?

This change has been completed with a 6 word recommended minimum: Review by [image] friadev - update: Recommend minimum word length for randomly generated passphrases main ← passphrase-length …

Not really sure what is the benefit. Just use your password manager for this.

I should make a new topic asking about StrongPhrase, but here are some of the strengths it has compared to most other password generators [image] StrongPhrase.net - Random passphrases, passcodes, usernames, and identities Project Showcase Hi @AtomicBug ! I can’t believe I…

Today was my first time seeing StrongPhrase.net , and the concept is great. With that being said, I disagree with allowing a third-party to provide or even recommend passphrases. For example, clearnet users could have their IP address logged with a list of passphrases they were shown or copied from…

Password managers have option to capitalize words, add numbers and special characters, so even a 3-word pass can be a bit stronger. But yes, 4 words should be recommended as a minimum. Problem is, there are services that limit passwords to 20 characters, and it’s almost impossible to have good passp…

The benefit would be for certain things like your phone password that you can’t really use your password manager for. For those cases having a minimum number of words is important. I think 4 words is too low though, the EFF recommends at least 6 words.

why can’t you use your password manager for that?

I completely agree, the recommendation should be 6-10 words from the EFF Large Wordlist. This is better in line with what other experts recommend.

Obviously you can’t get your password manager open if your phone is locked, and whatever device your password manager is on would need to be running that would be attacked and they would get your encryption password that way. Better to memorize it, that’s the whole point of diceware anyway, to have …

Depend on what keyboard you use, you might be able to use emojis or UTf-8 characters, which could produce strong password without making it too long

Privacy Guides Community

Explicitly mention to use no less than 4 words when making a random passphrase, in the Intro to Passwords article

Site Development

jonah (Jonah Aragon) May 4, 2025, 3:07am 2

Seems pretty uncontroversial to mark this as approved and accepting PRs

I don’t know about recommending a specific password generator necessarily, but I think that warrants its own separate discussion.

Topic		Replies	Views
StrongPhrase.net Tool Suggestions	13	826	May 7, 2025
StrongPhrase.net - Random passphrases, passcodes, usernames, and identities Project Showcase	48	5639	March 21, 2026
Elaborate more on passphrase length and strength Guide Suggestions	22	3387	December 30, 2023
Password entropy Questions please-eli5	2	319	April 9, 2026
Any random alias/identity generators? Questions	2	392	June 2, 2025

Privacy Guides

Massive organizations are monitoring your online activities. Privacy Guides is your central privacy and security resource to protect yourself online.

Privacy Guides is a non-profit, socially motivated website that provides information for protecting your data security and privacy.

We do not make money from recommending certain products, and we do not use affiliate links.

Knowledge Base

Private Web Browsers

Top VPN Providers

Privacy-Respecting Services

Software Recommendations

More Resources

Explicitly mention to use no less than 4 words when making a random passphrase, in the Intro to Passwords article

Related topics