3 ms·
It's recommended that you have a different password for every site, not just for every type of site. If, for example, someone discovered your forum password, un
by vertex-four 13y ago
It's recommended that you have a different password for every site, not just for every type of site. If, for example, someone discovered your forum password, under your system attackers could take over all of your forum accounts.
Lots of us sign up for lots of sites to try out things, engage in one-off discussions, etc, so it's pretty necessary to have a password manager.
I'll point out that if you creates those passwords yourself, rather than using an entirely random generator, they likely have less entropy than you think, and so are more crackable. A password manager helps with that.
- bostik 13y ago> I'll point out that if you creates those passwords yourself, rather than using an entirely random generator, they likely have less entropy than you think, and so are more crackable. So true. I generate my passwords separately, for the simple reason that I haven't yet found a pssword manager that would fit me perfectly. Pass is getting relatively close. In the meanwhile, I keep my passwords either on [LUKS] encrypted partition or a GPG protected file. I can even disclose the exact method I use for generating these passwords: head -c 9 /dev/urandom | base64 - For high-value targets or if I'm feeling a bit more paranoid than usual, I go for 12 octects instead.
- oftenwrong 13y agoYou could get higher entropy with apg -a1 -n1 -m9 -x9 since it will have a greater alphabet
- mpyne 13y agoEntropy in bostik's example is controlled by the -c parameter to head, not by the size of the destination alphabet. If you increase the number of bytes read you'll see the length of the resultant string start to grow accordingly.