Many people believe passphrases are less secure than passwords simply because passphrases are susceptible to Wikipedia>Dictionary attacks. This is an inaccurate and thus dangerous belief. To understand why, we need to think about passwords and passphrases in terms of tokens.