NCSC lifts lid on three random words password logic The logic of using three random words for strong passwords and why the NCSC advises the approach. August 6, 2021 https://www.ncsc.gov.uk/news/ncsc-lifts-lid-on-three-random-words-password-logic
So, what have we learnt in the past 20 years? Not a lot. Those of us that used the original PGP, back in the day, have known the benefits of a "passphrase" for a long time. Password [phrase] length has always determined security and I can't see that changing for a while yet.