7 ms·

Passphrases You Can Memorize That Even the NSA Can’t Guess

70 points by etiam 12y ago

deleted 12y ago
[deleted]
diego 12y ago
I used this concept a while back to generate 7-word passphrases with 84 bits of entropy. I picked a list of popular words and filtered it down to 4270 that are reasonably short and memorable: https://raw.githubusercontent.com/dbasch/clj-brainwallet/master/words.txt https://raw.githubusercontent.com/dbasch/clj-brainwallet/mas... Here's a browser implementation. I wouldn't use it (do you trust your browser's prng? Do you trust my code?) but it's fun to see the passphrases it generates, and how easy it is to create a story to remember them. http://diegobasch.com/passgen/ http://diegobasch.com/passgen/ Same thing applied to generating bitcoin brainwallets. Once again, don't use this. It was just a fun experiment to see if I could keep money in my brain. http://diegobasch.com/brainwallet/ http://diegobasch.com/brainwallet/
jmcphers 12y ago
From the article: "Unfortunately there doesn’t appear to be user-friendly software available to help people generate Diceware passphrases" This is silly. There are popular applications for every major phone OS that implement Diceware. Does anyone feel that they're untrustworthy?
feld 12y ago
FreeBSD has an odd dictionary file (/usr/share/dict/web2a) which has short phrases. I use a script to randomly pull some entries from it and then I piece memorable ones together to make my passphrase. Sprinkle in some punctuation and character replacement and it makes great passwords that are easy to remember. % ./passphrase.pl 10 coppice-topped belly-naked bastard locust tree diamond bort middle-aged self-mapped air level field gun machine rifle chock stone % ./passphrase.pl 10 self-knowing soul-killing Magna charta fly-killing spring chicken blotting book finger-cone gauge glass Fort union assistant examiner % ./passphrase.pl 10 soya-bean oil foxtail pine island-dotted four-way cock side-bar rule benzoyl hydride straight-fibered steel town stone bramble rag-boiling
- TheLoneWolfling 12y ago
  Be careful that your "memorability" pruning doesn't reduce the entropy too much.
  - feld 12y ago
    You just increase the entropy by adding characters, numbers, etc and keeping it reasonably long (20+ chars). The entropy of my passwords is quite high according to Keepass.
    - heinrich5991 12y ago
      The thing is, you can't determine "entropy" of a password after the creation. It's the creating process that determines how "random" your password is. KeePass's measure is just an approximation, and I have no idea about how accurate it is.
- tedunangst 12y ago
  Not that odd. All the words from Webster's are in web2, all the compound entries (not strictly "words") are in web2a. That said, "straight-fibered four-way cock" is my new favorite passphrase.
  - feld 12y ago
    So that explains where they were sourced from. Thanks!
- jrapdx3 12y ago
  Using web2a is a great idea. I'd written a Diceware-like password generator in Scheme. The word word list was derived from the web2 list (FreeBSD /usr/share/dict directory). Even after paring it down to ~151000 items, the resulting passwords often contained arcane terms limiting password usability. With the web2a list slightly tweaked, I get many memorable passwords, e.g., "power-weaver-sand-screw-1081" or "cloud-ring-tea-fighting-1107". OTOH web2a is shorter (~76000 entries), giving 2 bits less entropy vs. using the filtered web2 list. Taking password readability into account, the higher rate of "keepers" with web2a probably evens out the difference. BTW the web2a word list is here (https://svnweb.freebsd.org/base/head/share/dict https://svnweb.freebsd.org/base/head/share/dict) in case anyone doesn't have access to it.
kurotetsuka 12y ago
Here's something I wrote a little while ago - an xkcd-style passgen script in ruby. Usage is just `./passgen.rb [number of words]`. Default word count is 5. https://github.com/kurotetsuka/passgen https://github.com/kurotetsuka/passgen
dghf 12y ago
A hat-tip to Arnold Reinhold, the guy behind Diceware, would have been nice. (I know the article links to the Diceware site, which gives Mr Reinhold's name at the bottom, but still ....)
dgomez1092 12y ago
From a UDS password framework the Dicey password generator is pretty formidable.For one things its extremley user friendly: you can memorize it easily, and there are infrequent errors attached to its usage. Deployment wise it's non-propietary software which is a plus. Lastly for security, it's easy to see that there is a big resistance to machine guessing. I liken this in intensity with an grID password, while although has a big cognitive exertion to be able to input your password within a set of grids which change, the security is high not only for machine guessing but also from internal observation since malware would be able to deduce the hash based off a new random event each time and resilient to physical observation!
leshow 12y ago
(shameless plug) https://github.com/leshow/rust_mnemonic https://github.com/leshow/rust_mnemonic BIP0039 has been around for a while and generates passphrases strong enough to be the seed of every private key you will ever deterministically generate in a wallet.
ademarre 12y ago
You can create your own dice word list by selecting 7776 words and indexing them with a base-6 ID.
salibhai 12y ago
Interesting rewrite of the actual title :P
- orky56 12y ago
  We're at the point where we're more worried about NSA then a random attacker, as we should be.
  - _lce0 12y ago
    hmm I guess we are worried about a smart attacker, and we know those guys are really smart
  - UweSchmidt 12y ago
    You can't imply that these organizations would need to try and guess your passwords though. They have extensive profiles on everyone, "see" the entire internet traffic and can take the data from that password protected website at will.
  - tedunangst 12y ago
    Really? You think the NSA is more interested in your bank password than random criminals in [country over there]?
salibhai 12y ago
This is actually pretty cool. From the article: Not too bad for a passphrase like “bolt vat frisky fob land hazy rigid,” which is entirely possible for most people to memorize. Compare that to “d07;oj7MgLz’%v,” a random password that contains slightly less entropy than the seven-word Diceware passphrase but is significantly more difficult to memorize. At one trillion guesses per second — per Edward Snowden’s January 2013 warning — it would take an average of 27 million years to guess this passphrase.
- TheLoneWolfling 12y ago
  The other advantage? It's generally faster /easier for someone to type something like "bolt vat frisky fob land hazy rigid" than "d07;oj7MgLz`%v,". At least it is for me.
  - garrettr_ 12y ago
    It's easier on keyboards (since we spend most of our time typing lowercase letters as part of text) and also on mobile (since you don't need to do annoying and error-prone context switching for capital letters or symbols). I think this is one of the greatest unspoken benefits of Diceware-style passphrases!
- srathi 12y ago
  Is the one trillion guesses per second with or without the key-stretching (hashing the master password N number of times)?
- digitalpacman 12y ago
  I actually can remember a password like the d07 one easier because of keyboard pattern matching. That's how I generate passwords is I draw patterns on the keyboard. It's so unpopular that nobody creates tables for keyboard patterns entries.
  - beltorak 12y ago
    I created an account just for you.... https://github.com/Rich5/Keyboard-Walk-Generators https://github.com/Rich5/Keyboard-Walk-Generators
rikkus 12y ago
I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
- M4v3R 12y ago
  Some guy lost 4 Bitcoins that were encrypted with a line from some obscure afrikaans poem, because someone was crazy enough to brute-force all possible private keys that you can come up with using basically any phrase you can find on the internet [0]. So as someone else already said - if it's online, it's not safe. [0] http://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet_disaster/ http://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet...
- 7Z7 12y ago
  If your pass phrase already exists online somewhere (song lyrics, quote, meme) it's much much less safe than seven random words.
- abandonliberty 12y ago
  A line from a song is far weaker entropy-wise due to grammar. I wonder by how much. Common songs/writings would be vulnerable to a dictionary type attack. As for the hundreds of passwords in your list, I'm convinced a password manager with a master password/3rd party auth/dongle is the way to go. Otherwise it's impossible to have unique passwords for all sites, rotate them, and remember them. Of course the risk is of losing the dongle.
  - bradleyjg 12y ago
    > A line from a song is far weaker entropy-wise due to grammar. Interesting observation, the usual objection is due to the reduced Kolmogorov complexity which is difficult to quantify. Let's look at a modified diceware scheme of the form: Article adjective noun adverb verb adjective noun A (non-random) example might be: The young boy really likes video games. I'm not going to go through the diceware word list and classify each word, but assuming it is (or could be made) 50% nouns, 25% adjectives, 14% verbs, 11% adverbs and four articles you'd get roughly: 2 bits + 11 bits + 12 bits + 10 bits + 10 bits + 11 bits + 12 bits = 68 bits, which is the equivalent to a 5.2 word normal diceware password. Most of that reduction comes from the article. Here's a random example made with a diceware generator: an straw scrim ne adorn drab sybil I'm not sure that's any easier to memorize.
ashmud 12y ago
These kinds of passwords remind me of gfycat URLs.
abandonliberty 12y ago
A mechanism to implement XKCD's password recommendation: http://xkcd.com/936/ http://xkcd.com/936/
_lce0 12y ago
I've tested the passphrase: password password password password and most of the online entropy checkers[1] says it's really safe to use such .. is this true? 1. http://rumkin.com/tools/password/passchk.php http://rumkin.com/tools/password/passchk.php
- fweespeech 12y ago
  http://www.oxforddictionaries.com/us/words/the-oec-facts-about-the-language http://www.oxforddictionaries.com/us/words/the-oec-facts-abo... Well assuming random guessing with 95% vocabulary coverage its about 50,000 words. A passphrase checker that doesn't start from there but rather works from the ascii tokens is likely not very helpful for checking the strength of a passphrase. > ... should be 8 characters or longer, which forces you to use multiple words or extra symbols. > ... should have upper case, lower case, symbols, and numbers; or at least three of those four groups. > ... should not be a common word and should not be a common phrase. > ... should not contain a date, a name, or other things that can be associated with you. > ... should be created randomly or semi-randomly. > ... should not be a suggestion when you type in the first few characters into Google. As for your cited tester, you seem to have ignored every single piece of advice on the page and it seems it doesn't test for it in an automated way. I'd say, in this case, the problem is a bug in the tester rather than the truth of that being "safe". If you had followed the guidelines, yes, it'd likely be reasonably safe.
- jmcphers 12y ago
  The entropy checker doesn't know about externalities like how common a word is or how likely it is to appear following some other word or how frequently it's used in passwords specifically. It's just measuring the length of the string, and probably the class from which its characters are drawn (in your case lowercase letters and spaces). Relevant Dilbert: http://dilbert.com/strip/2001-10-25 http://dilbert.com/strip/2001-10-25
  - _lce0 12y ago
    my point was using some common word on purpose, expecting it to produce a low entropy result My thinking was that "Correct Horse Battery Staple" had more entropy than: "go go go go go go go go go go go go go" .. which, apparently, is not
happyscrappy 12y ago
Their are two levels of security, Mossad and non-Mossad. Worrying about evading the NSA is premature optimization at best and a form of mental illness at worst.
- worklogin 12y ago
  Other than it not being tinfoil after the past 2-15 years of evidence that citizens are targeted, it's not unreasonable to assume that the public is "only" 10-20 years behind the NSA when it comes to technology. So unless you have lifecycle management on all your encrypted files, and plan on regular password rotation on everything on your hard drive that you keep encrypted, perhaps it's not unreasonable to use something secure and memorable NOW.
hackuser 12y ago
How many easy-to-remember words are there in English, does anyone happen to know? Does Diceware's list include almost all of them? By 'easy-to-remember', I mean for 99% of the world's English speaking population (i.e., for a widely used application). I'm trying to estimate the entropy of random, easy-to-remember words. I'm not trying to generate a list (which would vary by region and country).
Scaevolus 12y ago
The diceware word list has a lot of words that aren't very memorable. Here's my attempt at memorable password generation: http://rmmh.github.io/abbrase/ http://rmmh.github.io/abbrase/
Evolved 12y ago
In practice this would take longer than the 27 million years stated assuming 2 things: that the computer doing the guessing doesn't try passphrases it has tried in the past and that the user changes their password at least 1 time (more likely multiple times) within the 27 million years. This is contingent upon somehow not changing your passphrase to a passphrase much much higher up on the list of what the computer will try to guess. What are the chances of this occurring and what are the chances of the opposite occurring where the user's correct passphrase is somehow next on the list yet at that time the user randomly changes it to the passphrase at the very end of the list? Would this then mean it is better to keep the same passphrase forever or to change it?
DanWaterworth 12y ago
Reading this, I just thought of another way to make passphrases that might be a bit more memorable. The idea is to come up with a sentence which will be grammatically correct, so it'll be easier to remember. First, write down 36 words. Roll two dice, take six times the number on the first minus the number on the second plus one. That is the position in the list of the first word in the sentence. Next, write a new list of 36 words, but only include words that make sense given what is already there. Roll again as before and pick as before. Reusing words between lists is fine, but don't include the same word in the same list multiple times. Rinse and repeat until you have the desired amount of entropy. Each die thrown adds log_2 6 bits. Edit, just tried this, 36 is a lot of words to come up with. Much easier to write down 6 at the cost of making it twice as long. Unless you have access to lists of nouns, verbs, etc. Bored now, but came up with "Countries can slowly sit at my feet", 24 bits of entropy (some lists had 36 words others had 6. It's very low, but, if you did that 2 or 3 times, you'd be getting somewhere). Couldn't be easier to remember.
pgalland 12y ago
The official website of Diceware does not have a certificate http://world.std.com/~reinhold/diceware.html http://world.std.com/~reinhold/diceware.html Is it intentional ? The word list is signed but for someone unfamiliar with crypto an electronic signature is useless while a lock in the address bar is reassuring.
- beltorak 12y ago
  while true, the nice thing about the diceware wordlists is you can scan them. The only thing that would lower the entropy is if there were duplicated words. The lists are in alphabetic and numeric order.
blister 12y ago
This doesn't stop the biggest threat against a government-sponsored entity: if they really want to break into your data, they'll just install a key logger into your bios or some other crazy shit like that. All these nice pass-phrases do is protect you against people that get big user dumps of hashes like we saw with the recent Slack security breach. The NSA doesn't need to guess your passphrase. The Chinese equivalent doesn't need to either. They'll just literally watch you type it in. Or use existing vulnerabilities to capture the traffic at your border router. And if you're REALLY a person of interest, they'll just use their CIA equivalent to capture you and torture the information out of you.
digitalpacman 12y ago
Sadly doesn't work ever because of internet enforced password length and character pattern requirements.
- SchizoDuckie 12y ago
  So much this. You can think of a great passwords scheme for yourself, and then find yourself in a pool of shit where hotmail asks you to have maximum 12 characters in a password, facebook requires you use a number, but it can be up to 40 characters, amazon wants you to use a special character like an @ or a # and but has a max length of 15 so on and so on. Passwords. Suck. Use a password manager that autogenerates and autostores it like lastpass.

70 points by etiam 12y ago

deleted 12y ago

[deleted]

diego 12y ago

I used this concept a while back to generate 7-word passphrases with 84 bits of entropy. I picked a list of popular words and filtered it down to 4270 that are reasonably short and memorable: https://raw.githubusercontent.com/dbasch/clj-brainwallet/master/words.txt https://raw.githubusercontent.com/dbasch/clj-brainwallet/mas... Here's a browser implementation. I wouldn't use it (do you trust your browser's prng? Do you trust my code?) but it's fun to see the passphrases it generates, and how easy it is to create a story to remember them. http://diegobasch.com/passgen/ http://diegobasch.com/passgen/ Same thing applied to generating bitcoin brainwallets. Once again, don't use this. It was just a fun experiment to see if I could keep money in my brain. http://diegobasch.com/brainwallet/ http://diegobasch.com/brainwallet/

jmcphers 12y ago

From the article: "Unfortunately there doesn’t appear to be user-friendly software available to help people generate Diceware passphrases" This is silly. There are popular applications for every major phone OS that implement Diceware. Does anyone feel that they're untrustworthy?

feld 12y ago

FreeBSD has an odd dictionary file (/usr/share/dict/web2a) which has short phrases. I use a script to randomly pull some entries from it and then I piece memorable ones together to make my passphrase. Sprinkle in some punctuation and character replacement and it makes great passwords that are easy to remember. % ./passphrase.pl 10 coppice-topped belly-naked bastard locust tree diamond bort middle-aged self-mapped air level field gun machine rifle chock stone % ./passphrase.pl 10 self-knowing soul-killing Magna charta fly-killing spring chicken blotting book finger-cone gauge glass Fort union assistant examiner % ./passphrase.pl 10 soya-bean oil foxtail pine island-dotted four-way cock side-bar rule benzoyl hydride straight-fibered steel town stone bramble rag-boiling

TheLoneWolfling 12y ago
Be careful that your "memorability" pruning doesn't reduce the entropy too much.
- feld 12y ago
  You just increase the entropy by adding characters, numbers, etc and keeping it reasonably long (20+ chars). The entropy of my passwords is quite high according to Keepass.
  - heinrich5991 12y ago
    The thing is, you can't determine "entropy" of a password after the creation. It's the creating process that determines how "random" your password is. KeePass's measure is just an approximation, and I have no idea about how accurate it is.
tedunangst 12y ago
Not that odd. All the words from Webster's are in web2, all the compound entries (not strictly "words") are in web2a. That said, "straight-fibered four-way cock" is my new favorite passphrase.
- feld 12y ago
  So that explains where they were sourced from. Thanks!
jrapdx3 12y ago
Using web2a is a great idea. I'd written a Diceware-like password generator in Scheme. The word word list was derived from the web2 list (FreeBSD /usr/share/dict directory). Even after paring it down to ~151000 items, the resulting passwords often contained arcane terms limiting password usability. With the web2a list slightly tweaked, I get many memorable passwords, e.g., "power-weaver-sand-screw-1081" or "cloud-ring-tea-fighting-1107". OTOH web2a is shorter (~76000 entries), giving 2 bits less entropy vs. using the filtered web2 list. Taking password readability into account, the higher rate of "keepers" with web2a probably evens out the difference. BTW the web2a word list is here (https://svnweb.freebsd.org/base/head/share/dict https://svnweb.freebsd.org/base/head/share/dict) in case anyone doesn't have access to it.

kurotetsuka 12y ago

Here's something I wrote a little while ago - an xkcd-style passgen script in ruby. Usage is just `./passgen.rb [number of words]`. Default word count is 5. https://github.com/kurotetsuka/passgen https://github.com/kurotetsuka/passgen

dghf 12y ago

A hat-tip to Arnold Reinhold, the guy behind Diceware, would have been nice. (I know the article links to the Diceware site, which gives Mr Reinhold's name at the bottom, but still ....)

dgomez1092 12y ago

From a UDS password framework the Dicey password generator is pretty formidable.For one things its extremley user friendly: you can memorize it easily, and there are infrequent errors attached to its usage. Deployment wise it's non-propietary software which is a plus. Lastly for security, it's easy to see that there is a big resistance to machine guessing. I liken this in intensity with an grID password, while although has a big cognitive exertion to be able to input your password within a set of grids which change, the security is high not only for machine guessing but also from internal observation since malware would be able to deduce the hash based off a new random event each time and resilient to physical observation!

leshow 12y ago

(shameless plug) https://github.com/leshow/rust_mnemonic https://github.com/leshow/rust_mnemonic BIP0039 has been around for a while and generates passphrases strong enough to be the seed of every private key you will ever deterministically generate in a wallet.

ademarre 12y ago

You can create your own dice word list by selecting 7776 words and indexing them with a base-6 ID.

salibhai 12y ago

Interesting rewrite of the actual title :P

orky56 12y ago
We're at the point where we're more worried about NSA then a random attacker, as we should be.
- _lce0 12y ago
  hmm I guess we are worried about a smart attacker, and we know those guys are really smart
- UweSchmidt 12y ago
  You can't imply that these organizations would need to try and guess your passwords though. They have extensive profiles on everyone, "see" the entire internet traffic and can take the data from that password protected website at will.
- tedunangst 12y ago
  Really? You think the NSA is more interested in your bank password than random criminals in [country over there]?

salibhai 12y ago

This is actually pretty cool. From the article: Not too bad for a passphrase like “bolt vat frisky fob land hazy rigid,” which is entirely possible for most people to memorize. Compare that to “d07;oj7MgLz’%v,” a random password that contains slightly less entropy than the seven-word Diceware passphrase but is significantly more difficult to memorize. At one trillion guesses per second — per Edward Snowden’s January 2013 warning — it would take an average of 27 million years to guess this passphrase.

TheLoneWolfling 12y ago
The other advantage? It's generally faster /easier for someone to type something like "bolt vat frisky fob land hazy rigid" than "d07;oj7MgLz`%v,". At least it is for me.
- garrettr_ 12y ago
  It's easier on keyboards (since we spend most of our time typing lowercase letters as part of text) and also on mobile (since you don't need to do annoying and error-prone context switching for capital letters or symbols). I think this is one of the greatest unspoken benefits of Diceware-style passphrases!
srathi 12y ago
Is the one trillion guesses per second with or without the key-stretching (hashing the master password N number of times)?
digitalpacman 12y ago
I actually can remember a password like the d07 one easier because of keyboard pattern matching. That's how I generate passwords is I draw patterns on the keyboard. It's so unpopular that nobody creates tables for keyboard patterns entries.
- beltorak 12y ago
  I created an account just for you.... https://github.com/Rich5/Keyboard-Walk-Generators https://github.com/Rich5/Keyboard-Walk-Generators

rikkus 12y ago

I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!

M4v3R 12y ago
Some guy lost 4 Bitcoins that were encrypted with a line from some obscure afrikaans poem, because someone was crazy enough to brute-force all possible private keys that you can come up with using basically any phrase you can find on the internet [0]. So as someone else already said - if it's online, it's not safe. [0] http://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet_disaster/ http://www.reddit.com/r/Bitcoin/comments/1ptuf3/brain_wallet...
7Z7 12y ago
If your pass phrase already exists online somewhere (song lyrics, quote, meme) it's much much less safe than seven random words.
abandonliberty 12y ago
A line from a song is far weaker entropy-wise due to grammar. I wonder by how much. Common songs/writings would be vulnerable to a dictionary type attack. As for the hundreds of passwords in your list, I'm convinced a password manager with a master password/3rd party auth/dongle is the way to go. Otherwise it's impossible to have unique passwords for all sites, rotate them, and remember them. Of course the risk is of losing the dongle.
- bradleyjg 12y ago
  > A line from a song is far weaker entropy-wise due to grammar. Interesting observation, the usual objection is due to the reduced Kolmogorov complexity which is difficult to quantify. Let's look at a modified diceware scheme of the form: Article adjective noun adverb verb adjective noun A (non-random) example might be: The young boy really likes video games. I'm not going to go through the diceware word list and classify each word, but assuming it is (or could be made) 50% nouns, 25% adjectives, 14% verbs, 11% adverbs and four articles you'd get roughly: 2 bits + 11 bits + 12 bits + 10 bits + 10 bits + 11 bits + 12 bits = 68 bits, which is the equivalent to a 5.2 word normal diceware password. Most of that reduction comes from the article. Here's a random example made with a diceware generator: an straw scrim ne adorn drab sybil I'm not sure that's any easier to memorize.

ashmud 12y ago

These kinds of passwords remind me of gfycat URLs.

abandonliberty 12y ago

A mechanism to implement XKCD's password recommendation: http://xkcd.com/936/ http://xkcd.com/936/

_lce0 12y ago

I've tested the passphrase: password password password password and most of the online entropy checkers[1] says it's really safe to use such .. is this true? 1. http://rumkin.com/tools/password/passchk.php http://rumkin.com/tools/password/passchk.php

fweespeech 12y ago
http://www.oxforddictionaries.com/us/words/the-oec-facts-about-the-language http://www.oxforddictionaries.com/us/words/the-oec-facts-abo... Well assuming random guessing with 95% vocabulary coverage its about 50,000 words. A passphrase checker that doesn't start from there but rather works from the ascii tokens is likely not very helpful for checking the strength of a passphrase. > ... should be 8 characters or longer, which forces you to use multiple words or extra symbols. > ... should have upper case, lower case, symbols, and numbers; or at least three of those four groups. > ... should not be a common word and should not be a common phrase. > ... should not contain a date, a name, or other things that can be associated with you. > ... should be created randomly or semi-randomly. > ... should not be a suggestion when you type in the first few characters into Google. As for your cited tester, you seem to have ignored every single piece of advice on the page and it seems it doesn't test for it in an automated way. I'd say, in this case, the problem is a bug in the tester rather than the truth of that being "safe". If you had followed the guidelines, yes, it'd likely be reasonably safe.
jmcphers 12y ago
The entropy checker doesn't know about externalities like how common a word is or how likely it is to appear following some other word or how frequently it's used in passwords specifically. It's just measuring the length of the string, and probably the class from which its characters are drawn (in your case lowercase letters and spaces). Relevant Dilbert: http://dilbert.com/strip/2001-10-25 http://dilbert.com/strip/2001-10-25
- _lce0 12y ago
  my point was using some common word on purpose, expecting it to produce a low entropy result My thinking was that "Correct Horse Battery Staple" had more entropy than: "go go go go go go go go go go go go go" .. which, apparently, is not

happyscrappy 12y ago

Their are two levels of security, Mossad and non-Mossad. Worrying about evading the NSA is premature optimization at best and a form of mental illness at worst.

worklogin 12y ago
Other than it not being tinfoil after the past 2-15 years of evidence that citizens are targeted, it's not unreasonable to assume that the public is "only" 10-20 years behind the NSA when it comes to technology. So unless you have lifecycle management on all your encrypted files, and plan on regular password rotation on everything on your hard drive that you keep encrypted, perhaps it's not unreasonable to use something secure and memorable NOW.

hackuser 12y ago

How many easy-to-remember words are there in English, does anyone happen to know? Does Diceware's list include almost all of them? By 'easy-to-remember', I mean for 99% of the world's English speaking population (i.e., for a widely used application). I'm trying to estimate the entropy of random, easy-to-remember words. I'm not trying to generate a list (which would vary by region and country).

Scaevolus 12y ago

The diceware word list has a lot of words that aren't very memorable. Here's my attempt at memorable password generation: http://rmmh.github.io/abbrase/ http://rmmh.github.io/abbrase/

Evolved 12y ago

In practice this would take longer than the 27 million years stated assuming 2 things: that the computer doing the guessing doesn't try passphrases it has tried in the past and that the user changes their password at least 1 time (more likely multiple times) within the 27 million years. This is contingent upon somehow not changing your passphrase to a passphrase much much higher up on the list of what the computer will try to guess. What are the chances of this occurring and what are the chances of the opposite occurring where the user's correct passphrase is somehow next on the list yet at that time the user randomly changes it to the passphrase at the very end of the list? Would this then mean it is better to keep the same passphrase forever or to change it?

DanWaterworth 12y ago

Reading this, I just thought of another way to make passphrases that might be a bit more memorable. The idea is to come up with a sentence which will be grammatically correct, so it'll be easier to remember. First, write down 36 words. Roll two dice, take six times the number on the first minus the number on the second plus one. That is the position in the list of the first word in the sentence. Next, write a new list of 36 words, but only include words that make sense given what is already there. Roll again as before and pick as before. Reusing words between lists is fine, but don't include the same word in the same list multiple times. Rinse and repeat until you have the desired amount of entropy. Each die thrown adds log_2 6 bits. Edit, just tried this, 36 is a lot of words to come up with. Much easier to write down 6 at the cost of making it twice as long. Unless you have access to lists of nouns, verbs, etc. Bored now, but came up with "Countries can slowly sit at my feet", 24 bits of entropy (some lists had 36 words others had 6. It's very low, but, if you did that 2 or 3 times, you'd be getting somewhere). Couldn't be easier to remember.

pgalland 12y ago

The official website of Diceware does not have a certificate http://world.std.com/~reinhold/diceware.html http://world.std.com/~reinhold/diceware.html Is it intentional ? The word list is signed but for someone unfamiliar with crypto an electronic signature is useless while a lock in the address bar is reassuring.

beltorak 12y ago
while true, the nice thing about the diceware wordlists is you can scan them. The only thing that would lower the entropy is if there were duplicated words. The lists are in alphabetic and numeric order.

blister 12y ago

This doesn't stop the biggest threat against a government-sponsored entity: if they really want to break into your data, they'll just install a key logger into your bios or some other crazy shit like that. All these nice pass-phrases do is protect you against people that get big user dumps of hashes like we saw with the recent Slack security breach. The NSA doesn't need to guess your passphrase. The Chinese equivalent doesn't need to either. They'll just literally watch you type it in. Or use existing vulnerabilities to capture the traffic at your border router. And if you're REALLY a person of interest, they'll just use their CIA equivalent to capture you and torture the information out of you.

digitalpacman 12y ago

Sadly doesn't work ever because of internet enforced password length and character pattern requirements.

SchizoDuckie 12y ago
So much this. You can think of a great passwords scheme for yourself, and then find yourself in a pool of shit where hotmail asks you to have maximum 12 characters in a password, facebook requires you use a number, but it can be up to 40 characters, amazon wants you to use a special character like an @ or a # and but has a max length of 15 so on and so on. Passwords. Suck. Use a password manager that autogenerates and autostores it like lastpass.