Comment by andybak

Unless you're using a very constrained character set then 16 characters is pretty strong in my books.

What's your threat model?