I wish there were another password type for generation, to make passwords that are vaguely pronounceable, and are almost entirely lower case letters, but also include upper case and digits and a symbol.
What I'm envisioning is something along the lines of:
Chunks made up of six characters, which are made up of two random consonant-vowel-consonant syllables.
A password is maybe three of those chunks, with two having a random character (preferring first/last characters) tweaked to be either uppercase or a digit, and the chunks separated by dashes.
Ultimately it would generate passwords kind of like
wotsuv-8ugpaj-Nutzal
They're mostly lower case, so they're easy to type. They also include four main character classes, so they'll satisfy most sites' requirements. Being pronounceable also makes them easy to hold in your short term memory while typing them in on devices or something, and maybe easier to memorize.
I feel like these would strike a balance between the memorable passwords, which are really slow to type but easy to hold in short term memory, and fully random gibberish passwords.
By my reckoning a system like this should be north of 65 bits of entropy for 3 chunks, which seems pretty good enough.
Joby
I wish there were another password type for generation, to make passwords that are vaguely pronounceable, and are almost entirely lower case letters, but also include upper case and digits and a symbol.
What I'm envisioning is something along the lines of:
Chunks made up of six characters, which are made up of two random consonant-vowel-consonant syllables.
A password is maybe three of those chunks, with two having a random character (preferring first/last characters) tweaked to be either uppercase or a digit, and the chunks separated by dashes.
Ultimately it would generate passwords kind of like
wotsuv-8ugpaj-Nutzal
They're mostly lower case, so they're easy to type. They also include four main character classes, so they'll satisfy most sites' requirements. Being pronounceable also makes them easy to hold in your short term memory while typing them in on devices or something, and maybe easier to memorize.
I feel like these would strike a balance between the memorable passwords, which are really slow to type but easy to hold in short term memory, and fully random gibberish passwords.
By my reckoning a system like this should be north of 65 bits of entropy for 3 chunks, which seems pretty good enough.