Having uncommon words doesn't make a password hard to crack, they're in the dictionary just the same.
Having long words does make brute-force cracking harder.
Which is why everyone tries the dictionary search before the brute force.
Show HN: Memorable but hard to crack password generator
11–12 of 12 posts
Re: Show HN: Memorable but hard to crack password generator
#12Assuming a generous 1000000 words in the dictionary, and any non-letter ASCII printable separator allowed as a separator, this is equivalent to a 9 character random password with just lower case letters and digits, or a 7 character random password if all printable ASCII is allowed. It's about 46 bits of entropy. That is a bit low by modern minimum acceptable password length standards.