Password Strength

>>59538014

Sure, but don't forget to make a new password now you posted this one on the interwebs.

>>59538120
Oh, that's just an example. No worries. But thanks!

I usually make a password like:
>2g12BD421
I write it out, and after a couple times of using it, I automatically remember it.

File: 41c+E55k8mL.jpg (23KB, 300x300px) Image search: [Google]

23KB, 300x300px

>>59538158
>do similar with old hdds
>like
>"HDD SN:y46t60ge"
>keep them around my desk for a couple of days
>remember them
>disassemble it, inspect it, trash it
>be happy

>>59538244
That's actually quite clever.

>>59538014
The amount of complexity in your example is perfectly fine, less than that isn't. replacing letters with numbers l33t style isn't secure at all.

The best thing is always long random length randomly generated password with all kinds of characters.

File: password_strength[1].png (91KB, 740x601px) Image search: [Google]

91KB, 740x601px

>>59538014
Take a look at diceword. Or use song lyrics. Or part of a poem.

>>59538432
If you had all the computing power of all computers and super computers in the world, how long do you think it would take to guess this password?

>LucY7ChwN#w7f@wLiuS@SnpY%wLucY7ChwN#w7f@wLiuS@SnpY%w

>>59538014
Just using a phrase, complete with spaces and punctuation, will be just as secure and much easier to remember.
Eg. That pesky rabbit, Bugs Bunny, evaded Elmer Fudd again.

>>59538432
That's retarded. All the passwords generated by that method would have extremely low perplexity, despite being long.

>>59538522
It's not more secure when you use such common words.

>>59538529
The point is to make it harder to bruteforce

>>59538553
>I don't know what I'm talking about : The Post

>>59538553
Despite the lack of complexity, would this be any less secure? It would take longer for a password cracker to find it that the one in ops post.

>>59538603
I think people suggesting that it's insecure are assuming an attacker would know what password scheme you used and what dictionary.

But even knowing that and using a very poor 1000 word dictionary, you'd have to brute force 1000^4 possible options to get it.

>>59538529
That's why general advice is not to use "margarat thatcher is sassy" the second Snowden used it as an example.
>>59538493
148 bits of entropy, don't have precise tools at hand to calculate number of options.
>>59538603
There are some methods to easier bruteforce phrases. Nontrivial and I doubt they're used along with another attacks when people use "123456" passwords.

>>59538014

Guys, just use KeePassX and generate the max length password with as many custom characters as whatever service you're using allows and move on with your life.

Each thing you use a password needs to be different otherwise if one thing gets compromised, everything does. You're not going to remember extremely long complex passwords using a variety of characters no matter how good of a system you think you have. If you want more security, use a usb drive for second layer of security for keepass.

File: 1453896135638.png (53KB, 398x758px) Image search: [Google]

53KB, 398x758px

>>59538014

You could also run the password through some encryption method for some extra spice. the problem with that tho is you always must use the method again before inputting your password.

>>59538651

i used to use http://crypo.pw/encryptors for all of my encrypted hdd passwords.

File: password-strengthener.jpg (63KB, 621x450px) Image search: [Google]

63KB, 621x450px

Hey guys I discovered how to instantly make any password 100% secure.

Secret tech; donut steal.

I just use a single word with the first, middle and last letters uppercased
[spoiler]KolmivaiheKilowattituntimittarI[/spoiler]

File: 1378923599062.jpg (25KB, 360x479px) Image search: [Google]

25KB, 360x479px

>have a password to a service
>need to login while another person sitting next to me
>he keeps looking at the screen or keyboard, and not simply look away while typing the pw
No matter the strenght of your password, you need to look out for sneaky hackers.

>>59538432
That's implies the cracker ISN'T trying to check multiple dictionary words and phrases...

>>59538643

So much this. People tend to use the same password on everything. At best they use a slight variation of it.

>>59538791
I use correcthorsebatterystaple.net. (I checked through the JS source to endure nothing nasty)

It has a dictionary of 2289 words, chosen at random. Supposing you ask it to generate a 5 word phrase (as I usually do) there'd be 2289^5 = 62838956328310449 possible combinations for an attacker to check.