The PAM Duress is a module designed to allow users to generate 'duress' passwords that will execute arbitrary scripts when used in place of their regular password.

This blog post gives background information on the three random words password creation advice.