3 ms·
Certainly not if the complex variation is just as long, right? About 15 years ago I got bit by the common mistake of reusing the same password everywhere, it w
by kgwxd 5y ago
Certainly not if the complex variation is just as long, right?
About 15 years ago I got bit by the common mistake of reusing the same password everywhere, it was my email account and I can't believe I caught it in time before they changed the password or did anything to get my account banned. From then on, I remember just one complex password, the one for my password manager. Every site gets its own random password, as long and complex as they'll let me make it. If I get to pick a user name, I randomly generate that too, along with the answers to any security questions, which I keep in the notes section of the password manager.
- kadoban 5y agoOnce you get entropy high enough, it's no longer the weak link in the chain. So sure, a 50 character long letter/number/symbol line-noise can have more entropy than a 6 word random passphrase, but it doesn't matter and has some drawbacks. By the way, for security questions specifically, I'd recommend passphrases. Often there are protocols where you need to say the security question answer to a human and they need to verify it. You're not going to have a great time spelling out a bunch of nonsense letters, and there's also more chance someone would be able to talk customer service into "oh I don't know, I just typed random keys" or something. Your password manager can likely do passphrases for you as well so it's probably no harder.