Safe authentication considerations

[drehb]

It isn’t for 1 vs 2 words, but there was some analysis of complexity requirements from Trezor here:

What’s up today? (Part 1)

Comparism of different ways to make strong password