[willis936]

Hasn't this problem been solved for decades by diceware?

Use words as your characters with a dictionary of a few thousand words. Assume an attacker knows the dictionary. Make passwords that are too long to brute force (40+ characters). Use enough words that a dictionary attack is also infeasible (4+). Add a salt if you're feeling extra spicy.

Entropy is sufficient if you use the right language model.