nostr:npub1a76kz9rpksup2tye06uf67w2gffyvmp70q7je0fluxukul20xjpq473kkt Seems like this technique could be easily bruteforced by a dictionary attack, despite being a longer number of characters.

Personally (I'm no expert) I use a password manager. Most of my passwords are 128 characters (longer than four average words) that also use special characters, numbers, upper and lower case characters. Using a physical key such as a #Yubikey seems a better way, too.

I love #XKCD, but the advice in this strip seems kinda out of date.