4 ms·
I don't think this is good advice. Password algorithms are security by obscurity, and only work as long as people don't figure out your "trick" to generating pa
by benmanns 9y ago
I don't think this is good advice. Password algorithms are security by obscurity, and only work as long as people don't figure out your "trick" to generating passwords that look random.
You should be able to publish your password algorithm without people being able to compromise your accounts. Here's mine:
Pick 20-30 characters from the set of alphanumerics and special characters. Adjust length and character set to match site requirements.
With the given example, if your password is leaked plaintext on two sites, someone can reduce their brute force space from 100^30 to [A-Z][a-z][A-Z]B1a3k#[0-9]{1,2}.3 or 26^3*10^2 which is roughly 100^3