3 ms·
> Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key. How would you remember a password of 128bit of entropy?
by manmal 4y ago
> Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key.
How would you remember a password of 128bit of entropy?
- dagw 4y ago9-10 words chosen at random from a list of 10k common words in you native language will get you to 128 bits. Sure not trivial to memorise, but far from impossible.
- manmal 4y agoYou're not wrong of course - this would come with heavy UX issues though. E.g. it's hard to type 10 words into a password field without messing up. And _really_ hard on a mobile device. 1P would allow you to have a password like "1234" and still have the same key entropy as that 10 word password alone.
- fluidcruft 4y agoA mobile app could easily facilitate that by storing a "passphrase prefix" (or suffix, etc) using biometrics/device key and requiring users to enter the remainder if you don't trust the device to store the entire thing.
- DavideNL 4y agoHere's a 142bits entropy password: CorrectHorseBatteryStaple Also see: https://xkcd.com/936/ https://xkcd.com/936/
- manmal 4y agoDepending on dictionary size, the entropy is way lower. Assuming a dictionary of 10k words, it’s only 53 bits. In the comic it says 44 bits btw.