Why does using multiple random words with mixed casing improve password strength?

Why does using multiple random words with mixed casing improve password strength?

• A. It reduces the complexity requirements.
• B. It increases length and entropy, making brute-force harder.
• C. It makes it easier to remember the password.
• D. It makes the password easier to guess.

Answer: (B)

The strength comes from making the password both long and highly unpredictable. When you use several random words, you dramatically increase the number of possible combinations an attacker would have to try. Each extra word multiplies the total options, so the search space grows exponentially. Adding mixed casing adds even more variation for each word, further inflating the total possibilities. This combination—more length plus a larger, more random set of possibilities—piles up entropy, which is the measure of unpredictability, and makes brute-force attempts far less likely to succeed. In contrast, a short or predictable pattern doesn’t provide that same explosion in possible candidates, so it’s easier to guess or crack. Even though remembering a longer phrase with random casing can be trickier, the security payoff is a much stronger defense against guessing.

The strength comes from making the password both long and highly unpredictable. When you use several random words, you dramatically increase the number of possible combinations an attacker would have to try. Each extra word multiplies the total options, so the search space grows exponentially. Adding mixed casing adds even more variation for each word, further inflating the total possibilities. This combination—more length plus a larger, more random set of possibilities—piles up entropy, which is the measure of unpredictability, and makes brute-force attempts far less likely to succeed.

In contrast, a short or predictable pattern doesn’t provide that same explosion in possible candidates, so it’s easier to guess or crack. Even though remembering a longer phrase with random casing can be trickier, the security payoff is a much stronger defense against guessing.