XKCD Passphrase-Generator

The XKCD Concept Explained

This method was made famous by the webcomic XKCD. It attacks a fundamental flaw in human psychology: through bad corporate password rules, we were trained to invent passwords that are hard for humans to remember, but easy for computers to guess (via raw computing brute-force power).

Best Practices for Passphrases

• Avoid Common Idioms: Don’t use well-known idioms like all-good-things-come-to-an-end. Attackers use phrase-dictionaries. True randomness (like the one generated above via system-entropy) is key.
• Separators: Adding hyphens (-) or dots (.) makes it easier for your eyes to capture the passphrase when reading, while increasing the computational complexity for custom parsing hacks.