[leddt]

A passphrase can easily exceed 20 characters and be memorable. They are usually considered a good security practice for people not familiar with (or not willing to use) password managers.