469
"How am I supposed to remember 12 characters!?" (lemmy.ca)
submitted 1 year ago by to c/techsupportmemes@lemmy.ca
40 comments fedilink hide all child comments
 
you are viewing a single comment's thread
view the rest of the comments
[–] 9 points 1 year ago (7 children)

Better password practices:

  1. Use Linux. I'm only half-kidding. A Linux distro will have you typing your password in far more than you ever thought you should have to, giving you much more practice with password memorization.
  2. Chunk the passwords, like phone numbers. am!z - _hBg - kj47 - GEW is easier to memorize than am!z_hBgkj47GEW.
  3. Use a password manager.
  4. Use a password manager.
  • permalink
  • fedilink
  • source
  • hideshow 7 child comments
    •
  • [–] 3 points 1 year ago (6 children)

    Or learn your passwords like our ancestors did. If something strikes you as poetic use it as a long password. I still remember an XKCD with "Correct Horse Battery Staple".

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 6 child comments
    •
  • [–] 2 points 1 year ago (4 children)

    I don't know where the entropy is at these days so I'm not sure exactly how many words are recommended at this point, but the issue with passphrases is that you have to treat each word like it's one character. Instead of a lot of symbols, now you need a lot of words for a strong passphrase. It also has to be random assortments of words that make no sense, so passages out of any documents are not a good idea. That XKCD strip is definitely outdated because 4 words wasn't enough even 10 years ago.

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 4 child comments
    •
  • [–] 1 point 1 year ago (1 child)

    That's only true if someone guessing your pass phrase knows that it's made up of words and not random characters.

    The idea behind pass phrases is that these things are easy for your human brain to remember, but long enough to be hard to guess by typing random characters (or even combinations of words) by an attacker or a computer (or even a LLM)

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago (1 child)

    What if you use made up words that will not appear in a dictionary

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 1 year ago

    Sorry I just now saw this in my notifies. That is a good question, and I would guess that it would in fact be significantly more secure (at least in the short term) than words from dictionaries - assuming they are truly and randomly made up. It's worth noting that human minds are notoriously bad at being random.

  • permalink
  • fedilink
  • source
  • parent
  • [–] 1 point 1 year ago*

    I came up with a modular ruleset that I memorised that allows me to have a unique and complex password for each seperate service, AND I never need to remember them or use a password manager, AND torture me all you want, I actually can't tell you the password unless I'm sitting in front of a US standard keyboard which is kind of annoying on mobile, such that I have a photo of a keyboard in my downloads folder.

    But seriously, torture me all you want, I like it.

  • permalink
  • fedilink
  • source
  • parent