5 ms·
As others have noted, her advice seems to be a little suspect. I took issue with the following: > Your password should not contain “real” words (and definitely
by passivepinetree 10y ago
As others have noted, her advice seems to be a little suspect. I took issue with the following:
> Your password should not contain “real” words (and definitely not more than one real word in immediate proximity, like “whitecat” or “angrybird”), and should contain capital letters, numbers and symbols. The best passwords of all look like total nonsense.
Isn't it generally accepted that the XKCD-style "correct horse battery staple" passwords are more secure?
- weka 10y agoYou would be correct. The plausibility that algos are geared towards one word/phrase with different variants and small additions are higher than the combination of seemingly random words.
- fiddlerwoaroof 10y agoAs far as I can tell, xkcd passwords are the securest way to generate memorable passwords but it's usually better to use a password manager to generate a random string of characters.
- emanreus 10y agoOne downside of xkcd style passwords is that they are not accepted everywhere. Many websites have a list of characters you must and must not include in your password.
- passivepinetree 10y agoRight, but a good password manager (like 1pass) will have both options available to generate so you can do XKCD-style where possible and randomly generated characters elsewhere.