4 ms·

Such common variations are accounted for by dictionary attackers.

• ativzzz 7y ago
  Realistically, which of my passwords are accessible by such? The vast majority of my passwords are on the web. I don't think any web server is capable of receiving that many password requests to brute force the creds there. Otherwise to get access to my PC? Let's just say that if that ever happens, having a more randomized password (and one that I can actually use) that takes a bit longer to crack won't make much of a difference, considering they already have my PC.
  • Dylan16807 7y ago
    If you're only worried about people trying to log in via the web, you can get away with a really bad password and you don't need any fancy tricks. If they get the drive from your PC, the difference between a medium password and a good password is not "takes a bit longer to crack". A better password is impossible to crack using current or near-future technology. The difference between 12 and 20 characters is that it takes ten million billion times longer to crack. (Assuming you encrypt your data. If you don't then all your effort on making a half-secure password is wasted from the start.) If you want real convenience for logging in to your PC, without compromising your security, then use a PIN that unlocks a key stored in the TPM.