3 ms·
First time I hear of this "three words" - is this actually promoted? Canonical "correct horse battery staple" is 4. 5+ truly random should still be strong. htt
by 3np 1y ago
First time I hear of this "three words" - is this actually promoted? Canonical "correct horse battery staple" is 4. 5+ truly random should still be strong.
https://xkcd.com/936/ https://xkcd.com/936/
- drweevil 1y agoDitto. I use 5 to 6. Also, the problem with recommending passphrases is that I don’t see a decent explanation from those recommending them as to how they work. Yes, I get that they are public key cryptography, but the details of the actual implementations (each seems different) make them confusing. And where there is confusion there is room for exploitation.
- tuatoru 1y agoYou are right, the explanation is glossed over. Perhaps because it is so simple: what matters for passwords is length. No other complexity metric (codeset, whatever) is even in the same race. Personally, my passphrases are seven words or more, which gets me to over 30 characters.
- 3np 1y agoEntropy is what matters, not length. OP gets this part right. "qwertyuiopasdfghjkl" or "aaaaaaaaaaaaaaaaaabc" are not stronger than "kmY7$®f0V".