4 ms·
> At a bare minimum you should be using a unique 32 character random alphanumeric on every website or service that you use. That is a non-starter....
by emddudley 10y ago
> At a bare minimum you should be using a unique 32 character random alphanumeric on every website or service that you use.
That is a non-starter....
- stcredzero 10y agoWhy would anyone use more than 128 bits of entropy in a password/passphrase? (24 characters alphanumeric with upper and lower case.) The answer: "I don't have to out-run the bear. I just have to out-run you!"
- joshka 10y agoAnd then protect it with a 128 bit AES key...
- stcredzero 10y agoBut when a website you're using is hacked, it's probably not your password database that's being attacked. It's probably that site's password hashing that's being attacked.