I tend to think of "passphrase" as one word (like "password"), so this can be all lowercase.