2 ms·
The article seems to contradict itself. The table says password strength doesn't matter for brute force unless you're using an unusable password. But then in th
by Thorrez 7y ago
The article seems to contradict itself. The table says password strength doesn't matter for brute force unless you're using an unusable password. But then in the conclusion it recommends you use a 9+ character password because that protects you from brute force.
- willvarfar 7y agoyeah. What the table needs is a column of how to mitigate each risk. Besides MFA, there's also all the things that the very first para says aren't important, e.g. avoiding password reuse (HIBP is now a Microsoft thing)