3 ms·
Or with actual code: https://github.com/creshal/yspave/blob/master/yspave/pwgen.py https://github.com/creshal/yspave/blob/master/yspave/pwgen.p... A password
by creshal 10y ago
Or with actual code:
https://github.com/creshal/yspave/blob/master/yspave/pwgen.py https://github.com/creshal/yspave/blob/master/yspave/pwgen.p...
A password generator does not care whether its input alphabet is \d, \w, all emoji codepoints, or `cat /usr/share/dict/words`. You determine the entropy of it, and then output as many tokens as needed. It doesn't matter whether an attacker has a copy of your input alphabet, or knows your algorithm. You defeat him by setting the entropy bar high enough (and using a cryptographically secure RNG to generate it).
But a random selection of /usr/share/dict/words (~120,000 entries on Arch Linux) will be easier to memorize than a random selection of the ascii printable range.