[xkcd] Password Strength

[github-actions[bot]]

Through 20 years of effort, we've successfully trained everyone to use passwords that are hard for humans to remember, but easy for computers to guess.

🔗 xkcd.com/936 · #936

Why it resonates: In the age of AI-assisted credential attacks, the math still holds — four random common words (~44 bits of entropy) beats Tr0ub4dor&3 every time, yet most password policies keep enforcing the wrong kind of "complexity."

Generated by Daily XKCD Comic · 64.8 AIC · ⌖ 12.4 AIC · ⊞ 24.3K · ◷

• expires on Jul 6, 2026, 10:13 AM UTC