Proposal to extend the pattern password generator

[Jan Kratochvil]

I have a proposal to modify the password generator based on patterns.
I suggest adding a placeholder "w" for a wordlist, i.e. a random word taken from a wordlist file - exactly as it is written in an external text file. File format: one word per line.

A side note – yes, I know there is an option to use an external plugin. I’ve tried them all; none of them does this. Moreover, most of them haven’t been updated for a long time, and some have a rather questionable history. And in any case, it’s always external code.

Plugins usually offer generating “passphrases”, which is a nice idea in itself, but such passwords are still impossible to use for many (most) services due to password length limits or complexity requirements – I think that’s clear.

My idea is as follows – for example, instead of the pattern l{5}.u{5}.d{3}, which generates a password like rfbhj.MCQHT.042 (which is already quite strong but hard to remember or type), use a word from a list instead of random characters. I deliberately say “list” and not “dictionary”. Everyone fills the list themselves, and what they put in it is entirely up to them. Ideally, these would be words that are not in dictionaries, are somehow mangled, or mixed with other characters in a way that makes sense to the user.

As an extension, I’m thinking about using placeholders “w” and “W”, where “W” would convert word from list to UPPERCASE. A pattern for generating a password similar to the previous example would then be:
w.W.d{3} – i.e. seekrit.PASWORLD.042

The password would not lose any strength – quite the opposite – and it would be far more human-friendly. Nonsense, or is this worth considering?
And what does the fox (Dominik) say?

[Bruce]

but hard to remember or type

That's why I, and probably at least one or two others, use KeePass. ;)