http://correct2qlofpg4tjz5m7zh73lxtl7xrt2eqj27m6vzoyoqyw4d4pgyd.onion
If Bruce Schneier thinks using four words is insufficiently secure, he should be suggesting five or six words, not shamelessly promoting his own password generation scheme . If you don’t believe me, that’s okay. Check out this post on the Information Security Stack Exchange . The top four answers (with vast majority of the votes) agree with me, and they provide more details and additional material to support xkcd-style passwords.