3 ms·
To prevent dictionary attacks. Any decent password cracker will use a dictionary before trying brute force attacks.
by lhopki01 9y ago
To prevent dictionary attacks. Any decent password cracker will use a dictionary before trying brute force attacks.
- nemesis_abc 9y agoThe example password is unlikely to be in the dictionary. I just made it up on the fly. Another example would be: 9999.9999+aaaa.aaaa+B It is not particularly hard to remember, while it forces the attacker to enumerate 94²¹ possibilities.
- daveFNbuck 9y agoIf an attacker obtains a few of your passwords, they can infer some things about how you're generating them and bring down the number of possibilities closer to the entropy of your method. If you use a high-entropy generation algorithm, no such attack is possible regardless of the information gained by the attacker.