The real key to a strong password? Math

Ordered triples

Here’s how three random words in English or any other language can identify such precise locations across the whole planet. The key concept is ordered triples.

Start with the basic assumption that the Earth is a sphere, recognizing that this is an approximate truth, and that its radius is approximately 3,959 miles (6,371 kilometers). To compute the surface area of the Earth, use the formula 4πr^2. With r = 3,959 (6,371), this works out to approximately 197 million square miles (510 million square kilometers). Remember: What3words is using 3-meter-by-3-meter squares, each of which contains 9 square meters of surface area. So, working in the metric system, Earth’s surface area is equivalent to 510 trillion square meters. Dividing 9 into 510 trillion reveals that uniquely identifying each square requires around 57 trillion ordered triples of three random words.

An ordered triple is just a list of three things in which the order matters. So “brilliance.bronze.inputs” would be considered a different ordered triple than “bronze.brilliance.inputs.” In fact, in the what3words system, bronze.brilliance.inputs is on a mountain in Alaska, not in the middle of the RIT Tigers Turf Field, like brilliance.bronze.inputs.

The next step is figuring out how many words there are in a language, and whether there are enough ordered triples to map the globe. Some scholars estimate there are more a million English words; however, many of them are very uncommon. But even using only common English words, there are still plenty to go around. You can find many word lists online.

The developers at what3words came up with a list of 40,000 English words. (The what3words system works in 50 different languages with independently assigned words.) The next question is determining how many ordered triples of three random words can be made from a list of 40,000 words. If you allow repeats, as what3words does, there would be 40,000 possibilities for the first word, 40,000 possibilities for the second word, and 40,000 possibilities for the third word. The number of possible ordered triples would then be 40,000 times 40,000 times 40,000, which is 64 trillion. That provides plenty of “three random word” triples to cover the globe. The excess combinations also allow what3words to eliminate offensive words and words that would be easily confused for one another.

Passwords you can actually remember

While the power of three random words is being used to map the Earth, the U.K. National Cyber Security Centre is also advocating their use as passwords. Password selection and related security analysis are more complicated than attaching three words to small squares of the globe. But a similar calculation is illuminating. If you string together an ordered triple of words – such as brilliancebronzeinputs – you get a nice long password that a human should be able to remember far more easily than a random string of letters, numbers and special characters designed to meet a set of complexity rules.

If you increase your word list beyond 40,000, you’ll get even more possible passwords. Using the “Corncob list” of 58,000 English words, you could generate more than 195 trillion “three random word”-style passwords.

It’s important to note that there are a fair number of trade-offs among the different approaches to password selection and complexity rules. So, while “three random words” doesn’t give you a fail-safe for password security, the complexity of language does provide some amazing power in this realm as well.

Mary Lynn Reed is a professor of mathematics at the Rochester Institute of Technology.