Use a passphrase but get your own

found on NIST

Well what do you know. Even NIST is doing security memes now.