commit

diff --git a/en/index.html b/en/index.html
index 65d982db25b8ea033ec946649446a69be3c571ac..60adc621486512c577da2e04a5c32ad4418e537c 100644 (file)
--- a/en/index.html
+++ b/en/index.html
@@ -203,7 +203,7 @@
                                                <li>On the screen titled "Encryption," select "Encrypt all of my messages by default, because privacy is critical to me."</li>
                                                <li>On the screen titled "Signing," select "Don't sign my messages by default."</li>
                                                <li>On the screen titled "Key Selection," select "I want to create a new key pair for signing and encrypting my email."</li>
-                                               <li>On the screen titled "Create Key," pick a strong password! Your password should be at least 12 characters and include at least one lower case and upper case letter and at least one number or punctuation symbol. Always assume surveillance agents can figure out your online passwords, so never reuse passwords for GnuPG elsewhere. Don't forget the password, or all this work will be wasted!</li>
+                                               <li>On the screen titled "Create Key," pick a strong password! We recommend the Diceware method, which creates passwords which are both strong and memorable. To use the Diceware method, you will need the dice and this list of words. Do not substitute computer dice for physical dice. Notice that each word on the word list corresponds to a unique five-digit number. Role one dice five times, or five dice once to select the first word. Don't rearrange or discard words, because doing so makes the process much less secure. Repeat this process until you have at least six words, and there's your password.</li>
 </ul>
                                        <p class="notes">The program will take a little while to finish the next step, the "Key Creation" screen. While you wait, do something else with your computer, like watching a movie or browsing the Web. The more you use the computer at this point, the faster the key creation will go.</p>
                                                <p><span style="font-weight: bold;">When the "Key Generation Completed" screen pops up, select Generate Certificate and choose to save it in a safe place on your computer (we recommend making a folder called "Revocation Certificate" in your home folder and keeping it there). This step is essential for your email self-defense, as you'll learn more about in <a href="#section5">Section 5</a>.</span></p>