5 ms·
i use a regular english sentence as my master password; seems to strike the right balance between not brute-forceable and easy to remember. am i missing some po
by zem 4y ago
i use a regular english sentence as my master password; seems to strike the right balance between not brute-forceable and easy to remember. am i missing some potential drawback to doing that?
- ReaLNero 4y agoOne thing to consider is that you can infer your password structure by ear (e.g. how many times the space bar was used, any modifier keys), making dictionary attacks much scarier, especially if your threat model includes people in close proximity/public areas.
- sandworm101 4y ago>> am i missing some potential drawback to doing that? My work machines (government) check for "commonly used words" and will generally reject natural language even if squashed between punctuation marks. "P@ssword" would probably slip through, but "GodIHateRememberingAllTheseStupidPasswords!@#!@" doesn't.