block the world, allow friends with a pw like their initials - lengthen as needed. This is an invasion by homeless bots, one-at-a-time blocking = they outnumber you.
Add the access PW to your signature as PW = your initials, or your initials twice/thrice in case bots surface. This is OK for families or small crews where the PW rules can be uniquely changed case by case. For bulk, we will all have to go to the new FIDO protocol which seems to be gaining traction.
https://fidoalliance.org/tag/new-fido-protocol/