3 ms·

Why not just make your password 'AskNotWhatYouCanDoForYourCountry'? That seems pretty strong to me.

• corin_ 15y ago
  If someone gets hold of your password from one source, the goal is that they won't be able to use it in other places, hence the "ma" from Amazon in his example. If I have maAskNotWhatYouCanDoForYourCountry then someone seeing it could possible guess the relevance of the ma, and try ew or hn, etc. on this site. Woth maAnwycd4yc on the other hand, without being told, are you going to guess that maybe it's a generic password with a small site-specific portion?
• noahc 15y ago
  Some websites cut your password off at twelve or even six characters. What this means is that your long password when you enter it into the password form is only 'AskNot'. That's not so hard to brute force. To avoid confusion some websites let you type in x characters, but only take the first y characters.
• RockyMcNuts 15y ago
  That works too. My main reason is: a pain to type on a mobile device As others mentioned: may also get truncated or not accepted as a valid password due to length; if you added Amazon in there somewhere it might be easy to reverse engineer for other sites
• hugh3 15y ago
  Well, I would think one should avoid using a famous quotation outright. My passwords tend to be based off nonsense sentences. Personalized nonsense I can remember, but nonsense nonetheless.