diff --git a/content/posts/password-strength.gmi b/content/posts/password-strength.gmi
index 812cfd4..9843f60 100644
--- a/content/posts/password-strength.gmi
+++ b/content/posts/password-strength.gmi
@@ -70,7 +70,7 @@ A more involved approach to picking a good value might utilize the Plank-Einstei
 
 => https://en.wikipedia.org/wiki/Planck%E2%80%93Einstein_relation Plank-Einstein relation (Wikipedia)
 
-It's also probably a better idea to make this value an estimate for flipping a single bit, and to estimate the average number of bit-flips it takes to make a single password guess. If that bothers you, pick a number b you believe to be a good estimate for a bit-flip-count and calculate P(n+b, e) instead of P(n, e).
+It's also probably a better idea to make this value an estimate for flipping a single bit, and to estimate the average number of bit-flips it takes to make a single password guess. If that bothers you, pick a number b you believe to be a good estimate for a bit-flip-count and calculate P(n-b, e) instead of P(n, e).
 
 What's the temperature of the system? Three pieces of information help us find out:
 
diff --git a/content/posts/password-strength.md b/content/posts/password-strength.md
index 6a02e40..228fc83 100644
--- a/content/posts/password-strength.md
+++ b/content/posts/password-strength.md
@@ -124,7 +124,7 @@ relation](https://en.wikipedia.org/wiki/Planck%E2%80%93Einstein_relation).
 It's also probably a better idea to make this value an estimate for flipping a single
 bit, and to estimate the average number of bit-flips it takes to make a single
 password guess. If that bothers you, pick a number `b` you believe to be a good
-estimate for a bit-flip-count and calculate `P(n+b, e)` instead of `P(n, e)`.
+estimate for a bit-flip-count and calculate `P(n-b, e)` instead of `P(n, e)`.
 
 What's the temperature of the system? Three pieces of information help us find out: