If you care about password strength: you want to measure strength in terms of the min-entropy of the randomized method you use to choose (). But how much min-entropy should a password have? (1/n)benwr.net/2022/01/16/pas… Well, I use a password manager to generate and store ~all of my passwords. I don't care how hard they are to memorize, so I generate crazy-long ones. But there's an important exception: The password for my password manager! How strong does that one need to be? (2/n)