Password entropy

[ktrc]

What are your password entropy recommendations? Any other source are welcome.

[FranklyFlawless (Frank Lý)]

The same as EFF’s recommendation:

EFF Dice-Generated Passphrases

For most applications, we suggest making a six-word passphrase.

That is at least 77.54 bits of classical entropy based on KeePassXC measurements.

[Colter]

I would say at least 80bit for website logins and at least 128bit but preferably near 256bit for encryption.

For device password’s where a strong secure element is in place, maybe different stuff