7 ms·
#2 is less secure, not because of entropy per se., but because it will already be present in existing password test files and/or is trivial to create and test (
by pwg 5y ago
#2 is less secure, not because of entropy per se., but because it will already be present in existing password test files and/or is trivial to create and test (i.e., JohnTheRipper's ability to generate test candidates based upon patterns).
- _justinfunk 5y agoAccording to haveibeenpwnd.com my 20a password has been seen 2,154 in data breaches and the random one my password manager created has not.
- whatatita 5y agoThat link should be to https://haveibeenpwned.com/ https://haveibeenpwned.com/ . Notice the extra "e" before the last "d".