
Didn't you read the first commenter's helpful remarks?
"For 20 characters to be truly effective, they need to be chosen randomly. A highly unlikely scenario."
We're talking normal people here, and not using password managers. Identify the real deficiency, okay?