3 ms·
How many users actually read? I don't trust the surveys on this, at all. But if they've read a book, many a passphrase will be "you're a wizard", or some other
by tgv 5y ago
How many users actually read? I don't trust the surveys on this, at all. But if they've read a book, many a passphrase will be "you're a wizard", or some other YA cliche. In book quotes, there will be extremely little diversity. And nobody is going to type 'it was ...', as long as 'hunter1234' suffices.
I don't think this is a problem with an easy solution. The low hanging fruit, enforced password rules, has been tried, further strengthening requires alternative solutions, such as 2FA, hardware keys, one-time pads, etc.