Comment Re: Yes (Score 3, Informative) 143
Not even close. 1 of a possible 170k words is NOT the same as 1 of a possible 26 characters. In fact, there are 6538 times as many possibilities per instance.
- HCBS1! assuming always capitals, a number and a a possible exclamation point is 26^4*10*2 = 9.1e6
- HCBS1! assuming always lower or upper case, a number and a a possible exclamation point is 52^4*10*2 = 1.4e8
- HcBs1! assuming 6 completely random upper case letters, lower case letters number and special characters (20 possible special characters) = (52+10+20)^6 = 3.0e11
- HorseCorrectBatteryStaple1! assuming 4 words (170k possible words), first letter capitalized, 1 number and a possible exclamation point = 170k^4*10*2 = 1.6e22
- HorseCorrectBatteryStaple assuming 4 words (170k possible words) and NOTHING else = 170k^4 = 8.3e20 (that's an 8 with 20 zeros, or 83 ExaPasswords)
So even without adding any numbers, special characters or character substitutions, 4 random words are inconceivably more secure than even completely random sequences of characters.
Just 4 words would take