3 ms·
You just need a larger number of random words to reach the same entropy as random passwords. It's not like your random password is made up from secret alphabets
by Natanael_L 9y ago
You just need a larger number of random words to reach the same entropy as random passwords. It's not like your random password is made up from secret alphabets!
- pault 9y agoSentences aren't random.
- xelxebar 9y agoYou seem to be misunderstanding how diceware works. You randomly generate numbers by throwing dice. Every five rolls indexes exactly one "diceware" word. So even if an attacker knew we were using diceware, each word contains log2(6^5) = log2(7776) ≈ 12.9 bits of entropy. If you want 128 bits of etropy in your security question field, then just randomly generate 10 diceware words. This is comparable to choosing 20 random printable ascii characters or so. Since we pick the words by literally throwing dice, English grammar has nothing to do with it.
- pault 9y agoI was responding to someone who was recommending using sentences from books as passwords. Hence the comment about grammar.