4 ms·

So if 2 people have the same password, they have the same wallet?

• phaer 13y ago
  You could use a username too, right? Because <unique username> + <any password> should be unique.
  • mistercow 13y ago
    Not quite. Say user "fortunate_sonar" uses "arkansas" for a password, and "fortunate_son" uses "kansas" as a password. You can use a delimiter to reduce the chances of that happening, but it's not strictly unique.
    • fnayr 13y ago
      You mixed the passwords up.
    • phaer 13y ago
      Well, if you use a delimiter which you forbid in usernames and Passwords it should be okay, no?
  • gabemart 13y ago
    Not really. A username of 8 characters and a password of 8 characters ensures no more entropy than a password of 16 characters and not bothering with a username. It might even provide less, given that the user is more likely to share their username with others than they are to share half their password.
    • rch 13y ago
      How about a long-ish memorable phrase and password, encrypted with scrypt? Hit the output with base64 and use the first N characters of the, possibly hashed, result (haven't tried it, so I'm not sure what stage of the output would be most memorable). The results should be about as easy to remember as a routing number + bank account, which is something my friends and I all do.
    • phaer 13y ago
      I meant that you can enforce uniqueness for usernames more easily than for passwords.
• kolinko 13y ago
  Not just that, but if you have a slightly obvious password, your money will be gone in seconds. That's why you never should use any quotations or popular phrases as a brainwallet password. There are people who watch those phrases.
• mrb 13y ago
  Yes. That's a feature. You can log on any computer, and access your coins, with no server and no state. But note that "if 2 people have the same password" means you can guess someone's password. And not being able to guess passwords is an assumption that any and all password-based systems have to make. Avoiding guessable passwords is easy: implement verification of the password strength.
  • hackinthebochs 13y ago
    >And not being able to guess passwords is an assumption that any and all password-based systems have to make The difference being that you're not testing against everyone's password at the same time. Also using an extremely strong password means a large number of people are going to forget and thus completely lose access to their wallet. I'm not sure this is a solution to the problem of barrier to entry to bitcoin.
    • mrb 13y ago
      I disagree about an inability to remember/store a password, creating a "large" barrier to entry. There exists many ways to securely store passwords. For one, educate users that it is OK to write down the password offline as long as it is stored securely in a safe, or in your wallet, which you already trust for your cash and important documents.