4 ms·
> Can someone point out a big flaw in my password management system? The issue is that your passwords have almost zero entropy in them. The only guard is that
by IncRnd 4y ago
> Can someone point out a big flaw in my password management system?
The issue is that your passwords have almost zero entropy in them. The only guard is that others don't know your secret function. Password crackers are already programmed to handle functional password composition. You might want to ask yourself why pw crackers are programmed that way.
- grogenaut 4y agoTaken in isolation they might have a ton of entropy, just not taken across leaked password databases.
- drexlspivey 4y agoIf my password is hunter2#gmaildotcom for gmail what could my reddit password be? It doesn’t take many leaks to crack the formula.
- grogenaut 4y agoYes but is someone specifically looking at your passwords across all the accounts I'm trying to crack them or are they just taking the easy road and trying those same passwords and every other site. One requires a lot more effort than the other while still being relatively easy. Generally people do not have specific attackers going after them they are going after broad spectrum attackers you don't have to be faster than the bear you just have to be faster than the other person running from the bear. And yes I'm not saying that's actually secure I'm just pointing out a consideration. Also there are different classes of passwords out there email and password for marketing site I'm never going to use again but I'm forced to sign up for versus something that actually is protecting something I care about like my credit card or worse my financials.