3 ms·
maybe i am wrong, but i think you did not read the full article? "This article estimates that the average password is merely 40 bits strong, and that estimate
by user15128 9y ago
maybe i am wrong, but i think you did not read the full article?
"This article estimates that the average password is merely 40 bits strong, and that estimate is already higher than some of the others. In order to guess a 40 bit password you will need to test 2^39 guesses on average. If you do the math, cracking a password will take merely a minute on average then. Sure, you could choose a stronger password. But finding a considerably stronger password that you can still remember will be awfully hard."
- kuschku 9y agoI did, but that assumes the average person. This is HN, not Facebook, so we can make different assumptions. E.g., we can assume that everyone has read the famous XKCD on passwords, and is using passwords that are a bunch of words after another, in lowercase ascii, which would get us somewhere around 80 bits of security, and still keep it memorable.
- Buge 9y agoThat xkcd comic recommends a password that by its own estimate is 44 bits of entropy. Why do you assume a HN user would choose something stronger than that?