Trezor warned in August 2026 that length alone does not guarantee entropy because automated cracking tools systematically test dictionary words, leaked passwords, and common patterns

From the articleTrezor Now Accepts 128-Character Passphrases, Pointing to Coldcard's Seed Flaw - Unchained