Steve Gibson would say[0] it's better than "!!!!!!!!!!!!!!!!!!!!!!!!!!!!!" because it's a character longer

This article[1] disagrees because of the difference in bounding entropy high or low

NIST[2] says the following (by way of [3]):

> 4 bits - first character

> 2 bits - each of next 7 characters

> 5 bits - characters 9-20

> 1 bit - each character over 20

In short ... go for long passphrases whenever possible over passwords (and, of course, hope your target hashes them well!)

------------

[0] https://www.grc.com/haystack.htm

[1] https://treskal.com/kha/blog/2011/08/26/how-much-entropy-in-...

[2] https://web.archive.org/web/20040712152833/http:/csrc.nist.g...

[3] https://blog.augustschell.com/passwords-passphrases-complexi...