Why are random passwords best?
Suppose you had a list of passwords to check. If you had a list of 1000 passwords, you (or a computer with a longer list) might start at number 1 and work up to number 1000. If the password were number 1, then you would get it in the minimum time. If it were number 1000, then to you find it in the maximum time. The creators of the password might know this, and choose password 1000. You would discover their password in the maximum time. You may realise this, and check the first and last passwords at the beginning of the test. Now you would find the password faster. Once again, the password creators might try to foil you by choosing a password in the middle of the list, say number 500. As time passes, they might try various other ways, but eventually they realise that while they may achieve an initial advantage, this advantage costs them dearly when you realise their trick. The password creators realise that selecting a random password is the best way to foil you.
