Hacker News new | ask | show | jobs
by kragen 5421 days ago
This is probably not as secure as the xkcd scheme if you don't make up the phrase yourself. See my comment above with calculations about a variant of this scheme. I suspect that both of your example phrases are among the million most quoted phrases in the English language, giving them entropy of under 20 bits.