• falsemirror@beehaw.org
    link
    fedilink
    arrow-up
    12
    ·
    10 months ago

    Many PW managers let you generate passphrases, which are all around better than random strings. Length is the most important factor so

    finance-caffeine-utopia-redress-unseen

    Is way stronger and easier to remember (and type) than

    Fl7$j4FWw)&5O

    • Myaa@beehaw.org
      link
      fedilink
      arrow-up
      3
      ·
      10 months ago

      Huh, TIL. I had no idea that was an option but that’s super useful for things I need to type in on a device with no keyboard, or even things I can’t access my password manager for. Thanks for the protip there!

    • Murkhat@feddit.de
      link
      fedilink
      arrow-up
      2
      ·
      10 months ago

      Is it really safer? I mean when trying to bruteforce a password, one would have to make a guess whether it’s a passphrase or not. But if you decided to check for pass phrases, wouldn’t the one you posted be cracked in 5 times the amount of words in that dictionary? I’m not sure how large the vocabularies of the generators are, but I would guess a random 17 char password might be safer than a 5 phrases password?

    • esaru@beehaw.org
      link
      fedilink
      arrow-up
      2
      ·
      edit-2
      10 months ago

      And pass phrases are faster to type and with less typos even though they need more characters than passwords to be the same secure.