4 ms·
3 words isn't nearly enough. Typically you'd want at least 6-7, or ideally 8-9.
by Natanael_L 9y ago
3 words isn't nearly enough. Typically you'd want at least 6-7, or ideally 8-9.
- AnIdiotOnTheNet 9y agoDepends on what you're protecting. Try not to lose sight of the idea that security doesn't exist in a vacuum.
- Natanael_L 9y agoXkcd's classical correct course battery staple is about 40 bits is entropy, while being selected uniformly at random from a fairly large pool of words. I can assure you that the average user wouldn't get above 15 - 20 bits with self selected words. That's often worse than most current passwords.