Why is a passphrase like "Mond Auto Strand Luft Mensch Zelle" a strong password despite being made of real words?

Random words strung together create huge entropy through length, and they're easy to remember by building a story.

The trick:

A dictionary attack tries single words. To attack a passphrase, the attacker must try combinations of words — and the math explodes:

• 5 random words from a 10,000-word dictionary → 10,000⁵ = 10²⁰ combinations
• That's about 100 billion times harder than brute-forcing 8 random characters

Why it's memorable:

The brain remembers stories far better than random strings. Picture the moon (Mond) reflecting on a car (Auto) parked at the beach (Strand)… your hippocampus loves that stuff, your working memory does not love xK7$qPm9!Lz#.

The catch:

The words must be truly random — not a quote from a song, book, or movie. Attackers have specialized wordlists built from lyrics, poetry, and common phrases.

Tool: https://www.eff.org/dice — EFF's diceware wordlists are the gold standard.

Go deeper:

• Password strength (Wikipedia) — the entropy math behind why long multi-word passphrases beat short complex strings.