3 ms·
The symbols, numbers, and capitals are part of the problem. We should have been using passphrases all along. https://xkcd.com/936/ https://xkcd.com/936/ I sti
by MattGaiser 5y ago
The symbols, numbers, and capitals are part of the problem. We should have been using passphrases all along.
https://xkcd.com/936/ https://xkcd.com/936/
I still remember the XKCD password.
- ThePowerOfFuet 5y ago> I still remember the XKCD password. Now try remembering 436 different ones.
- RhetoricX 5y agoExactly. And also remember which of those 436 easily-remembered passphrases go with which accounts.
- u801e 5y agoCorrect <url> horse battery staple
- pllbnk 5y agoI have to disagree with the perceived security with this approach because it fails the requirement of not reusing your passwords. In case you have this clever scheme and use it on some malicious or insecure website, your scheme could be leaked and then it's only marginally harder to break into your other accounts. Randomly generated passwords don't have this weakness.
- u801e 5y agoIdeally, we shouldn't solely have to rely on unique username/password combinations to log into various accounts. As I mentioned in another comment, had websites and browser makers made it easier to use client-side TLS certificates as part of the authentication process, then both the certificate and a username/password would be needed to log into an account. Then even if someone decided to use the exact username/password combination across all their accounts, since they have a different client-side TLS cert for each account, it would not be practical to get into their accounts without access to the device that stored the private key and the associated certificates.