5 ms·
> if we just require long passwords, no other requirement ... then I bet lots of users will choose passwords like "passwordpasswordpassword".
by gjm11 16y ago
> if we just require long passwords, no other requirement
... then I bet lots of users will choose passwords like "passwordpasswordpassword".
- trafficlight 16y agoI'd go with passwordpasswordpasswordpassword. Just to be safe.
- gcr 16y agoThe wise thing is to allow for and encourage the use of passphrases. Sentences are both easier to remember and harder to guess!
- joe24pack 16y agoand of course only an alliteratively poetic machinist would think to use "sublimeswarfswirlsslowly"
- nowarninglabel 16y agoPossibly, but I sure would like some data on this. Theoretically, I could try this out by getting approved from the CIO first and then just checking the hash vs the hash for passwordpasswordpassword and passwordpasswordpasswordpassword as well as any password in the top 100 from the previous leak that was > 16 characters (not sure if there are any). As said, I'd like some to get some real data as opposed to stipulations, but obviously it's hard to get this kind of data.