5 ms·

I just use lines of poetry for my passwords. They're long enough, complex enough, but extremely easy for humans to memorize.

Luc 9y ago
If it were me I'd add a bit of salt (some random string) to those...
- ryanSrich 9y ago
  This is what I do. Music lyrics with characters mixed in. I have the alternates memorized so it's fairly easy to remember. Ex: 5, S, and $ are all interchangeable.
deleted 9y ago
[deleted]
rocqua 9y ago
The entropy in that is actually quite low, especially if you have even just a slight bias towards popular poems. Given this info I think it'd be quite easy for a dedicated person to reverse a password hash of yours.
pbhjpbhj 9y ago
I reckon on having >100 passwords. Whilst I might manage to remember the phrase I couldn't match them up to the context -- "she wishes for the cloths of heaven" is that Amazon or Etsy?? I have a manually maintained database with a bash one-liner for password generation; primarily I rely on my browser's password manager.
noja 9y ago
It was strong until you told us.
PeterisP 9y ago
Phrases from published works aren't strong passwords no matter how long they are. Here's a nice example from a few years ago - https://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet_disaster/ https://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_walle... where "a line from an obscure poem in Afrikaans" was considered secure. Granted, your password hash isn't going to get as much effort as BTC brainwallet cracking, but phrases/lines from common poems are going to be in bruteforcer lists. Also, for any targeted attacks, everything from every poet or band you've ever liked on facebook or mentioned in any online resource are going to be used against you, so you better use poetry from authors that you don't like or ensure that you have never talked about which authors you like (easier said than done). Checking every line from e.g. Shakespeare is easy.

Luc 9y ago

If it were me I'd add a bit of salt (some random string) to those...

ryanSrich 9y ago
This is what I do. Music lyrics with characters mixed in. I have the alternates memorized so it's fairly easy to remember. Ex: 5, S, and $ are all interchangeable.

deleted 9y ago

[deleted]

rocqua 9y ago

The entropy in that is actually quite low, especially if you have even just a slight bias towards popular poems. Given this info I think it'd be quite easy for a dedicated person to reverse a password hash of yours.

pbhjpbhj 9y ago

I reckon on having >100 passwords. Whilst I might manage to remember the phrase I couldn't match them up to the context -- "she wishes for the cloths of heaven" is that Amazon or Etsy?? I have a manually maintained database with a bash one-liner for password generation; primarily I rely on my browser's password manager.

noja 9y ago

It was strong until you told us.

PeterisP 9y ago

Phrases from published works aren't strong passwords no matter how long they are. Here's a nice example from a few years ago - https://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet_disaster/ https://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_walle... where "a line from an obscure poem in Afrikaans" was considered secure. Granted, your password hash isn't going to get as much effort as BTC brainwallet cracking, but phrases/lines from common poems are going to be in bruteforcer lists. Also, for any targeted attacks, everything from every poet or band you've ever liked on facebook or mentioned in any online resource are going to be used against you, so you better use poetry from authors that you don't like or ensure that you have never talked about which authors you like (easier said than done). Checking every line from e.g. Shakespeare is easy.