Engineering
š“ Passphrase Generation: Why "Correct Horse Battery Staple" Beats Random Characters
Use NordPass to generate, store, and autofill secure passphrases across all your devices with zero-knowledge encryption.
Use NordPass to generate, store, and autofill secure passphrases across all your devices with zero-knowledge encryption.
For decades, the conventional wisdom around passwords pushed users toward strings of gibberish: a capital letter here, a number there, a punctuation mark wedged in for good measure. The result was a generation of credentials like "P@ssw0rd!" that were simultaneously difficult for humans to remember and surprisingly easy for computers to crack. The passphrase approach, popularized by the famous "correct horse battery staple" comic from xkcd, flipped this thinking on its head. Instead of cramming complexity into a short string, it spreads entropy across multiple random words, producing credentials that are both stronger and easier to recall.
Understanding why this works requires a shift in how we measure password strength. The enemy of a password is not human intuition but computational brute force, and machines do not care whether a string looks complicated to a person. What matters is the mathematics of guessability, expressed in a single concept: entropy.
Entropy, measured in bits, quantifies how unpredictable a secret is. Each additional bit doubles the number of possible combinations an attacker must try. A password with 40 bits of entropy has roughly one trillion possible values, while one with 80 bits has more than a septillion. The goal of any good credential is to maximize entropy while remaining usable by the human who must type it.
Consider a traditional eight-character password drawn from uppercase letters, lowercase letters, digits, and symbols. That gives roughly 95 possible characters per position, yielding about 52 bits of entropy if every character is chosen truly at random. The problem is that humans almost never choose characters at random. We substitute "a" with "@", capitalize the first letter, and append a "1" or "!" at the end. Attackers know these patterns intimately, and modern cracking tools exploit them ruthlessly, reducing effective entropy far below the theoretical maximum.
A passphrase built from four randomly selected words from a list of 7,776 entriesāthe standard Diceware word listāprovides approximately 51.7 bits of entropy. Five words push that figure above 64 bits, and six words exceed 77 bits. Crucially, this entropy is honest: it assumes the attacker knows exactly which word list you used and is guessing word combinations directly. There are no hidden patterns to exploit because the words are chosen by genuine randomness rather than human preference.
The elegance of the passphrase method lies in its alignment with human memory. Our brains are extraordinarily good at remembering vivid, concrete images and terrible at recalling abstract symbol strings. "Correct horse battery staple" conjures an absurd but memorable mental picture, while "Tr0ub4dor&3" requires rote memorization that fades quickly. This is not a minor convenienceāit directly affects security. When passwords are hard to remember, users write them on sticky notes, reuse them across sites, or choose weaker variants. A memorable passphrase eliminates these failure modes.
Several principles make passphrases effective:
The Diceware method, created by Arnold Reinhold in 1995, remains the gold standard for manual passphrase generation. The process is disarmingly simple: roll five six-sided dice, read the resulting five-digit number, and look it up in the word list. Repeat for as many words as desired. Because physical dice are immune to software compromise and produce verifiably uniform randomness, this approach offers strong assurance even against a sophisticated adversary who might tamper with software.
For those who prefer convenience, reputable software generators can produce passphrases using the operating system's cryptographically secure random source. The key requirement is that the generator draws from a proper entropy pool rather than a predictable pseudo-random function seeded by something guessable like the current time. Well-designed password managers now offer passphrase generation as a built-in feature, letting users specify the number of words and separators.
Separators and capitalization can add marginal entropy, but they should never be relied upon as the primary source of strength. Adding a digit or a random separator character between words contributes a few extra bits, which is a useful bonus but no substitute for adding another word. When a site imposes character requirementsādemanding a number or symbolāappending a single random digit or inserting a separator usually satisfies the rule without sacrificing memorability.
One persistent myth holds that passphrases are weak because they use "dictionary words," and everyone knows dictionary attacks are dangerous. This confuses two very different things. A dictionary attack against a single common word is indeed trivial. But a dictionary attack against four independent random words must contend with the combinatorial explosion of all possible word combinations. With 7,776 words, four-word combinations number more than 3.6 quadrillion. The strength comes not from the obscurity of individual words but from the sheer number of arrangements.
Another misconception is that length alone guarantees security. A long passphrase assembled from a predictable sourceāfavorite movie quotes, for instanceāprovides little protection. Entropy depends on the randomness of selection, not merely the count of characters. Forty random characters chosen by a person who follows familiar patterns may be weaker than four genuinely random words.
Putting this knowledge into practice is straightforward. The following guidelines balance security and usability for most people:
The passphrase revolution represents one of the rare instances where better security and better usability move in the same direction. By trusting mathematics over intuition and randomness over cleverness, we arrive at credentials that resist machines while accommodating humans. "Correct horse battery staple" was never just a jokeāit was a demonstration that the strongest defenses are often the simplest ones, built on principles anyone can understand and apply. As computing power continues to grow and attackers refine their tools, the humble random passphrase remains a quietly powerful safeguard for the secrets that matter most.