@pthane @PortsmouthGreens @PerryM Yes it does help a lot!
For every attack, we must assume that the attacker knows how we created the password. But still, this increases the number of possible words, so it helps.
To reference my own table again:
https://chaos.social/@Septem9er/110260038180253016
There you can see how much of a difference a bigher wordlist (2024 vs. 7776) makes (first row).
The important thing here is: The passphrase must be created truly random. Not in your head.
Attached: 3 images In case anyone else is interested on a comparison of passphrases vs. passwords, here is the result. Number in the top row refers to the number of words in the #wordlist and the hardware used. The number in the first column refers to the number of words in the #passphrase For comparison the original table for passwords from hive systems. We assume the attacker knows we use a passphrase and uses a wordlist attack. Other than that method and calculation basis as in: https://www.hivesystems.io/blog/are-your-passwords-in-the-green