3 ms·
To me, “if you can remember your password, it is likely not strong enough“ — conflicts with suggesting it is okay for a user to use “a six-digit key code” on th
by wonderous 9y ago
To me, “if you can remember your password, it is likely not strong enough“ — conflicts with suggesting it is okay for a user to use “a six-digit key code” on their iPhone.
Any thoughts or clarifications?
- tptacek 9y agoYes: your six-digit PIN is physically secured in ways your online passwords aren’t.
- tonyztan 9y agoTo expand on that, the iPhone hardware (secure encalve) limits the number and rate of PIN attempts. Depending on configuration, after a number of incorrect attempts, it either takes an increasingly long time to make a guess or just wipes the device (by destroying the encryption key).
- UncleMeat 9y agoThis is pretty shitty advice. Online brute force attacks against passwords are rare. The only really important advice for passwords is never reuse anything. This is only achievable with a password manager. So the only really important advice is to use a password manager. Everything else is noise.
- idlewords 9y agoMy phrasing is a way of telling people to use a password manager that doesn't rely on them understanding what "password manager" means.