3 ms·
Why 64 characters? Because 128 would be too much... Seriously though, I like obnoxiously long passwords because it clues me in to who is storing my password in
by mikece 6y ago
Why 64 characters? Because 128 would be too much...
Seriously though, I like obnoxiously long passwords because it clues me in to who is storing my password in a manner than can be reverted to plain text if not in plaintext directly. If you're using a salted hash to store my password it shouldn't make a difference whether my password is "HN/2020/Jun!" or the full text of War and Peace -- just the hash will be stored. Anyone who tells me my password is too long makes me nervous because they are doing something different.
And of course I'm a little paranoid: how many breach datasets are your credentials in?