It could be argued that Randall’s example of 4 words is too short — and indeed, for some applications, it is. However for a typical dictionary size, andgenuinely random selection, it is massively stronger than “typical” passwords and in fact easily adequte to defeat the above-mentioned ...