diff --git a/src/index.html b/src/index.html
index 61e364c..d2782f7 100644
--- a/src/index.html
+++ b/src/index.html
@@ -66,7 +66,7 @@
       <div class="form-group row">
         <label for="word-count" class="col-sm-2 col-form-label">Word Count</label>
         <div class="col-sm-10">
-          <input id="word-count" class="form-control" type="number" name="count" value="5" min="1">
+          <input id="word-count" class="form-control" type="number" name="count" value="4" min="1">
         </div>
       </div>
 
@@ -131,7 +131,7 @@
   <p>Let us consider the absolute worst case, assuming the attacker knows your password is generated by this site,
     knowing that it has 65 bits of entropy, your password was insecurely hashed, and your enemy has GPUs to run
     <span class="mark">500 billion attempts every second</span>. Even then, this scheme will resist the
-    cracking attempt for over a year.</p>
+    cracking attempt for <code>over a year</code>.</p>
 
   <p>Now, most attackers can't attack you that fast, and those who could have better things to do than spending a year
     doing nothing but attacking you (unless you possess state secrets or something), so this is more than sufficient for