• cravl@slrpnk.net
    link
    fedilink
    arrow-up
    2
    ·
    5 hours ago

    Once I was bored so I downloaded a list of the top 100,000 passwords and counted how many have the name “Vlad” in them. It was 400-something I think. The more you know.

    • rockSlayer@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      1
      arrow-down
      5
      ·
      11 hours ago

      Disagree, correcthorsebatterystaple is probably more cryptographically secure than any random password you’re using now, and it’s extremely memorable

      • MSBBritain@lemmy.world
        link
        fedilink
        arrow-up
        9
        ·
        10 hours ago

        Longer is always better, but a fully random password will always be stronger than a “memorable” password of equal length.

        You need exactly one memorable password, and that should be the one to your password manager, maybe two if you need to log into your device first. From there everything else should be long and random. Hell, with most of them you don’t ever even need to know your own passwords, the tool just handles them itself.

        XKCD has it right that you need length over complexity, but it’s also from 2011. Today, we very easily can and should get both.

        • Jumi@lemmy.world
          link
          fedilink
          arrow-up
          1
          ·
          9 hours ago

          My password manager has no master password so I know literally not one of my passwords

      • slazer2au@lemmy.world
        link
        fedilink
        English
        arrow-up
        5
        ·
        10 hours ago

        Until you remember that dictionary attacks exist and it’s not that complex.

        Using passwordmosnster that password is 76 years “to crack” as it is all lower case, English words.

        Removing the e from staple increases the time to 98 centuries.

  • infinitevalence@discuss.online
    link
    fedilink
    English
    arrow-up
    6
    ·
    9 hours ago

    NpO0LO$@Sxx^^u259Qx8R1S4

    1UGAGmcuLjLM@BXl9W!Zmp

    $P$ec7VrC#v1$@b^d8I7qOU9

    rSQ8U4FeZ@AA8Ovd#uGJL68J

    VxyfjhE7aziS&VJ7*@v&7tsH

    ks$38BKxUK*^gsd5dOCMQ8@&

    Here have some free passwords.

  • henfredemars@infosec.pub
    link
    fedilink
    English
    arrow-up
    6
    ·
    11 hours ago

    If you’re lucky, you can get away with remembering just one for your password manager. That password hasn’t changed in over 10 years.

  • kbal@fedia.io
    link
    fedilink
    arrow-up
    2
    ·
    11 hours ago

    On those occasions where just letting Librewolf generate a random-looking one isn’t good enough and I need to actually remember a password, I get them by picking some random words from /usr/share/dict/british-english-insane and putting them together with small but memorable changes that would be difficult to guess.

    Every time I do it, it feels like the best password I ever came up with.

    • TranquilTurbulence@lemmy.zip
      link
      fedilink
      English
      arrow-up
      1
      ·
      6 hours ago

      Those random passwords are really hard to type correctly and even harder to pronounce. If you can pronounce it it, typing it suddenly becomes easier. How about using gibberish words you can pronounce and type. Sort of like goobaFodi3hesto/roli. Can’t find any of that in a dictionary, but you can actually type it when needed.