3 ms·
When helping people construct passwords I always guide them to use an acronym from a favorite line of a song (or bible verse, or poem depending on audience) and
by tcskeptic 16y ago
When helping people construct passwords I always guide them to use an acronym from a favorite line of a song (or bible verse, or poem depending on audience) and then add a symbol and a number. So for example if you really like Led Zeppelin you might take the opening line"
"Hey Hey Mama Said The Way You Move Gonna Make You Sweat Gonna Make You Groove"
and turn it into the password hhmstwymgmysgmyg!8
or "The woods are lovely, dark and deep. But I have promises to keep"
to become: twaldadbihptk$9
Easy to remember, relatively high entropy, pretty good compromise.
- forensic 16y agoYour idea was ok until you posted it on the internet. Since I already had a song-lyric dictionary (that prioritized complete phrases like you used there, "HHMSTWYMGMYSGMYG" being FAR more likely than just "HHMSTW") it didn't take long for my program to just grab the first letter of each song lyric word, stick them together, and then add every possible combination of symbol->number to the dictionary. Now everyone you've told to do that will be very quickly cracked if I ever get their hash. This is security through obscurity and you just gave away your obscurity by posting your algorithm on the internet...