4 ms·
That XKCD comic is good advice. But use a long enough passphrase. Also, he's being (very) conservative. In other words, he's assuming a very fast password crac
by TheLoneWolfling 11y ago
That XKCD comic is good advice. But use a long enough passphrase.
Also, he's being (very) conservative. In other words, he's assuming a very fast password cracker. Roughly speaking, he has a wordlist of ~8070 words, which works out to ~13 bits of entropy / word. Which implies at 3My to crack 7 words he's assuming ~26 trillion (!) password hashes per second.
That's potentially realistic if you're using a fast hash - but you should be using something that's slow (and memory-constrained) for a password hash.
- DanBlake 11y agoDoesnt the english language consist of 500,000-1,000,000 words? * http://www.merriam-webster.com/help/faq/total_words.htm http://www.merriam-webster.com/help/faq/total_words.htm
- TheLoneWolfling 11y agoYes. But most of them are far too close to each other to remember easily. Or relatively not used words. It's (generally) easier to just use a longer passphrase and a shorter wordlist of only relatively common words.