| I agree! I've been using passphrases for about 12 years, but in this form: Ia! Ibupfa1y,bitf: (It's the first letter of every word in that sentence.) A sentance relevant to me that also refers to the site is easier for me to remember than random words. But perhaps I could make it longer... Use the kxcd idea too. The entropy is huge unless/until everyone starts making 3 word passphrases the same way with very common words. There can also be dictionary attacks on common passphrases, especially after a large site is compromised. Lately I've been changing it up by offsetting my fingers on the keyboard. Unfortunately each password/phrase input has different requirements and limits, and there's many different confusing help texts for explaining it. And it's frustrating to find out the limits after committing to memory and submitting. What's a good, plainly written ux standard that we can advocate? |