3 ms·
I'm not saying it is literally impossible for this to be safe. I'm saying in pratcie, most of the time, it is not. A 120 bit password is not normal.
by lvh 8y ago
I'm not saying it is literally impossible for this to be safe. I'm saying in pratcie, most of the time, it is not. A 120 bit password is not normal.
- Dylan16807 8y agoA password manager is not 'normal' but it's common enough that you shouldn't be classifying it as negligible to conclude that these passwords are worse than nothing. Also the 120 bits was an example and a good amount more than necessary. A 12 character password isn't exactly standard but it's not ridiculous to expect. Once you exclude the passwords that are so bad even bcrypt can't save them, the number of users where the password algorithm makes a difference starts to look a lot smaller than 100%.