Just a friendly warning that comic is bullshit.

You would need at least 8 random words to have about the same security as 12+ random characters. The entropy maybe higher, but every serious hacker uses rainbow tables, dictionaries or even phrases from common digitalized books...