Passphrase or random password? The math behind both
How strong a six-word passphrase really is compared with a random 16-character password, and which one to use for what.
Passwords
How long should a password be? What NIST says in 2025 and why
NIST SP 800-63B-4 asks for at least 15 characters for passwords used on their own and drops complexity rules and forced resets. Here is the reasoning, with the numbers.