4 ms·

I, personally, use my own password generator to generate passwords using 10 lowercase ASCII characters excluding ilo. That's 45 bits of entropy or one year of b

I, personally, use my own password generator to generate passwords using 10 lowercase ASCII characters excluding ilo. That's 45 bits of entropy or one year of brute forcing trying 1 million attempts per second. I consider that a reasonable strength for all but the most important websites. The password generators that generate me 20 characters of different character classes are crazy.

aniviacat 2y ago
KeepassXC allows you to customize its password generator according to your preferences.
- seanw444 2y ago
  Love KeepassXC. Even if you don't want to go full offline, I think Bitwarden does the same.
  - fencepost 2y ago
    Bitwarden's password generation is actually a little weak - it's great at generating random gibberish passwords, but it seems to be randomized at the character level so you'll get things like "Cq$ypWocG6Byp#" - hard to remember, hard to type. It lets you specify length, upper, lower, digits, (limited) special, minimum # of digits, minimum # of special, and "avoid ambiguous characters" but that's the extent of it. Even the ability to have it group character types would be helpful if you're ever going to be typing on mobile devices. It also offers Passphrase generation using dictionary words plus digits and specials (as word separators). You can change the special character used, but it's not randomly chosen each time. I'd love it if it had an option for pronounceable or syllable-based generation as described in the article.
- vbezhenar 2y ago
  I'm using Apple Safari passwords storage, it's enough for me, but KeePass is definitely great.
Aloha 2y ago
Ideally, any passwords you generate for hand typing or being read over the phone should exclude include only one of each I/l/1, 0/O soundalikes without phonetics - so include only one of the following e, p, c, v, t, 3
johnisgood 2y ago
I use: alias genpasswd='openssl rand -rand /dev/random -base64' Additionally I have a function in Bash that takes words from particular languages which are separated, along with "gpw" ("Generate Pronounceable Password", a C program).
evantbyrne 2y ago
Sure that's fine for things that truly don't matter, but if you're using a password manager then you might as well generate more characters. Bear in mind there is no guarantee that services storing your passwords are using something like bcrypt with slow settings. I've definitely seen things like PBKDF2 set to comically low iterations or even raw sha/md5.

aniviacat 2y ago

KeepassXC allows you to customize its password generator according to your preferences.

seanw444 2y ago
Love KeepassXC. Even if you don't want to go full offline, I think Bitwarden does the same.
- fencepost 2y ago
  Bitwarden's password generation is actually a little weak - it's great at generating random gibberish passwords, but it seems to be randomized at the character level so you'll get things like "Cq$ypWocG6Byp#" - hard to remember, hard to type. It lets you specify length, upper, lower, digits, (limited) special, minimum # of digits, minimum # of special, and "avoid ambiguous characters" but that's the extent of it. Even the ability to have it group character types would be helpful if you're ever going to be typing on mobile devices. It also offers Passphrase generation using dictionary words plus digits and specials (as word separators). You can change the special character used, but it's not randomly chosen each time. I'd love it if it had an option for pronounceable or syllable-based generation as described in the article.
vbezhenar 2y ago
I'm using Apple Safari passwords storage, it's enough for me, but KeePass is definitely great.

Aloha 2y ago

Ideally, any passwords you generate for hand typing or being read over the phone should exclude include only one of each I/l/1, 0/O soundalikes without phonetics - so include only one of the following e, p, c, v, t, 3

johnisgood 2y ago

I use: alias genpasswd='openssl rand -rand /dev/random -base64' Additionally I have a function in Bash that takes words from particular languages which are separated, along with "gpw" ("Generate Pronounceable Password", a C program).

evantbyrne 2y ago

Sure that's fine for things that truly don't matter, but if you're using a password manager then you might as well generate more characters. Bear in mind there is no guarantee that services storing your passwords are using something like bcrypt with slow settings. I've definitely seen things like PBKDF2 set to comically low iterations or even raw sha/md5.