https://alitweel.ly/blog/2012/04/10/passwords-or-passphrases/