The Meter Can't See Your Dice: Why "Strong Password" Ratings Lie About Derived Secrets
t he short version, before the cat: a password strength meter measures how a string looks, not how it was made. If your secret was derived from something short, no amount of symbols and capital letters makes it harder to guess — and in Bitcoin, that...