Add: note about passphrase strength

1 files changed, 9 insertions, 0 deletions

diff --git a/pgptalk.mdwn b/pgptalk.mdwn
index be02b9c..49ffaa2 100644
--- a/pgptalk.mdwn
+++ b/pgptalk.mdwn
@@ -142,6 +142,15 @@ Storing keys securely
 * Subkeys can also be stored on special devices for more secure key
   storage, such as Yubikeys
 
+* A private key is data "at rest" (as opposed to "in transit"), and is
+  basically only protected by the passphrase you set.
+
+    * Choose a long passphrase that you won't forget. GnuPG can handle
+      any length you can remember and type.
+
+    * You can change the passphrase later if you want to make it
+      stronger.
+
 ---
 
 Creating a key, with subkeys, with GnuPG