You know that, I know that, XKCD knows that and that’s a great way to do it BUT- it’s not just four random words. It’s four random words per service/website I use, which starts to complicate things again.

Sure I can use a password manager on mobile, but Granny who wants to talk to Little Johnny on the messenger he recommended doesn’t have one, nor will she typically remember the four (slightly modified) words in 6 weeks time, meaning she will probably write it down on paper to remember, inherently more insecure than allowing her a shorter password, possibly with a special character she might be able to remember, in my opinion.

I understand the security requirements and why they make sense, but we’re in the field of messengers here, which are incredibly hard to get people to switch to at the best of times. If people are immediately hit with a hurdle at registration, it will probably scare quite a lot of them away if they’re already out of my comfort zone and I find that a shame for such a neat looking project.