2 ms·
Not controversial at all, very true. Make the password unique and >128+ bits of entropy and that's all that is needed. At that point it is as strong as a share
by jjav 6y ago
Not controversial at all, very true.
Make the password unique and >128+ bits of entropy and that's all that is needed. At that point it is as strong as a shared AES key.
- bawolff 6y agoWe probably don't even need 128 bits of entropy. TOTP 2FA is only 20 bits after all and people seem happy with that. If we make them be pseudo sentences they will probably be easier to remember (the $adjective $noun $adverb $verb a $adjective2 $noun2)