Some sites require punctuation/symbols/capitals/digits. Do you intend to support this? Diceware offers suggestions for how to choose symbols/digits securely. The FAQ page recommends not capitalizing, but I would argue that isn't great advice when your login system measures password strength based on the presence of capital letters, not on bits of entropy.
Some sites require punctuation/symbols/capitals/digits. Do you intend to support this? Diceware offers suggestions for how to choose symbols/digits securely. The FAQ page recommends not capitalizing, but I would argue that isn't great advice when your login system measures password strength based on the presence of capital letters, not on bits of entropy.