2 ms·
I have my doubts that any human-memorizable password can be strong enough to withstand a concerted offline attack. If what you're encrypting has to stay secret
by boring_twenties 6y ago
I have my doubts that any human-memorizable password can be strong enough to withstand a concerted offline attack. If what you're encrypting has to stay secret for 10, 20, 30 years (probably not the case for a password database), then it's a complete non-starter.
- bonoboTP 6y agoI have memorized a long sentence with randomly chose words out of large pools like geographic names, animal species and names of barely famous people, a random verb etc. Like "Bill Guthridge supplements in Bhadarwa with an Actias Luna" and a bunch of other words. Then translate this to a foreign language. Add more words if you feel more safe. After such random picks, you just get familiar with each actor in the sentence (read wiki pages then delete history) and refresh the whole sentence every 2-4 weeks using a reminder.
- wiml 6y agoIt's fairly easy to memorize a password with >64 bits of true entropy using techniques like diceware; if you use it regularly and/or have a good memory, 128 bits is completely feasible.