4 ms·
Except, how can you be sure your password was stored securely? You should never assume that. > You don't pick the words yourself, you choose them at random. Th
by ErrantX 11y ago
Except, how can you be sure your password was stored securely? You should never assume that.
> You don't pick the words yourself, you choose them at random. That's the whole point.
Suggest: you're supposed to choose them at random. In practice (source: 5 years as a security analyst) this does not happen. People are predictable!
- aianus 11y ago> Except, how can you be sure your password was stored securely? You should never assume that. You don't have to. You can use a password manager with an open protocol (like 1Password) where you can tell the db is encrypted using a key correctly and slowly derived from your master xkcd-style password. If done correctly, it's a much better scheme than randomly generated characters because at the same level of entropy you wind up with a password you can actually remember and type quickly and use consistently in conjunction with a password manager.