4 ms·
His primary point is that people should not be choosing passwords at all, and should instead use a password manager, except for a select few passwords such as l
by tempestn 12y ago
His primary point is that people should not be choosing passwords at all, and should instead use a password manager, except for a select few passwords such as logins for computer and phone, and the password manager master password itself.
Yes, the correct horse battery staple has more entropy than most common passwords, but the point is that we don't need a way of generating better memorable passwords. We can already just generate random, long, completely non-memorable sequences of characters and store them in a password manager, and that's what we should be doing.
- Dylan16807 12y ago>people should not be choosing passwords CHBS is a method for generating passwords, not choosing them.
- tempestn 12y agoOK, but its purpose is to generate memorable passwords. The point of the article is that focusing on making passwords memorable is counter-productive, since we shouldn't generally be trying to remember passwords. And if you're not trying to remember it, a string of 16 random characters works fine.
- dllthomas 12y agoYes and no. Secure and memorable passwords are still vital for securing your password manager. Having a means to generate them is not counter productive.
- dllthomas 12y agoI don't disagree with that primary point, but the "except..." is plenty of reason for recommending good mechanisms for password selection.