3 ms·

<month><animal><current_year> every 90 days is the god pattern

dlivingston 7y ago
If I crack one of your passwords (or search your email on haveibeenpwned), and assuming you haven't changed your animal, then cracking any other password you have is trivial and takes at most 12 permutations.
austincheney 7y ago
A better pattern is something long that will exceed the bounds of a rainbow table. I love JavaScript but I really wish it didn't have the ASI feature* The example is 67 characters long written in a statement that is easy to remember with two non-alpha characters aside from the spaces. Imagine the size of rainbow table it would take to crack that.
- OJFord 7y ago
  I'm not sure how easy that is to remember... Was it 'really love but wish' or 'love but really wish'? etc.
  - austincheney 7y ago
    I suspect you would word your password in a way that is most familiar for you. The idea is to achieve both cognitive comfort while destroying brute force efforts. A better example: Antidisestablishmentarianism is the longest English word I can think of## 73 characters.
    - saalweachter 7y ago
      I think you'd have more fun trying to imagine phrases no one would ever say. "But thankfully I took Kim Kardashian's advice, and everything worked out for the best."
- CydeWeys 7y ago
  I enter my password so many times each day (every time I step away from my computer and then come back to it, for example), so having such a long password would be quite the annoyance. Plus it's easy to make a typo and not realize it in a long sentence when you can't see what you're typing.
josefx 7y ago
I know at least one company that prohibits several ways to write any month or year like value in its password field. I think the animal might make it through as long as it doesn't have any shortened month name or repeating letters as sub string. I have found several creative ways to write new passwords for that login and am still annoyed when it randomly matches with "information from my profile".
jessaustin 7y ago
Let me guess... animal is always "dragon"?

If I crack one of your passwords (or search your email on haveibeenpwned), and assuming you haven't changed your animal, then cracking any other password you have is trivial and takes at most 12 permutations.

austincheney 7y ago

A better pattern is something long that will exceed the bounds of a rainbow table. I love JavaScript but I really wish it didn't have the ASI feature* The example is 67 characters long written in a statement that is easy to remember with two non-alpha characters aside from the spaces. Imagine the size of rainbow table it would take to crack that.

OJFord 7y ago
I'm not sure how easy that is to remember... Was it 'really love but wish' or 'love but really wish'? etc.
- austincheney 7y ago
  I suspect you would word your password in a way that is most familiar for you. The idea is to achieve both cognitive comfort while destroying brute force efforts. A better example: Antidisestablishmentarianism is the longest English word I can think of## 73 characters.
  - saalweachter 7y ago
    I think you'd have more fun trying to imagine phrases no one would ever say. "But thankfully I took Kim Kardashian's advice, and everything worked out for the best."
CydeWeys 7y ago
I enter my password so many times each day (every time I step away from my computer and then come back to it, for example), so having such a long password would be quite the annoyance. Plus it's easy to make a typo and not realize it in a long sentence when you can't see what you're typing.

josefx 7y ago

I know at least one company that prohibits several ways to write any month or year like value in its password field. I think the animal might make it through as long as it doesn't have any shortened month name or repeating letters as sub string. I have found several creative ways to write new passwords for that login and am still annoyed when it randomly matches with "information from my profile".

jessaustin 7y ago

Let me guess... animal is always "dragon"?