28 ms·
I do this at my current job, character by character, as I'm asked to update it. I think I have a mix of four different slightly modified semi-unique passwords I
by omgwtfbyobbq 7y ago
I do this at my current job, character by character, as I'm asked to update it. I think I have a mix of four different slightly modified semi-unique passwords I've used in the past so far, so it's not great, but not terrible.
My password is currently 35+ characters, using upper and lower case letters, numbers, and punctuation, and is not shared with any other account I have. Even if someone were to get a list of other passwords I've used they would need to correctly guess what passwords I'm using here, what modifications I've made to them, what the order was, and where in the last password I've used I am, since I append a single character at a time.
I also try to go out of my way to use the weakest passwords possible for non-critical websites (eg subject specific forums) so if those are compromised the only thing someone gets is my username plus a really weak password as opposed to my username plus a relatively strong/unique password.
With that said, as I'm writing this, I acknowledge I should really start from scratch. It's better to be safe than sorry.
https://correcthorsebatterystaple.net/ https://correcthorsebatterystaple.net/
- dangom 7y agoThat's an interesting idea, yet seems unsustainable. How would you deal with typing such a long password on a mobile, for example?
- omgwtfbyobbq 7y agoI'm not on mobile often anymore, but if I was it would be terrible and I would probably switch to something smaller or just use a keyboard (otg/usb? I'm not sure how secure bluetooth is).