Brute force protection

@memes

  • KoboldCoterie@pawb.social
    link
    fedilink
    English
    arrow-up
    6
    arrow-down
    1
    ·
    edit-2
    8 months ago

    My current favorite “memorizable” method (obviously a random hash from a PW manager is still better) is to take a sentence of moderate complexity that includes the name of the service you’re signing up for in it, and use the first letter of each word as your password.

    For example, “When I wake up in the morning, the first thing I do is go to pawb.social.”

    Password would be “WIwuitm,tftIdigtps.”

    Easy to remember, immune to dictionary attacks, and you get a (mostly) unique password for each service, so stolen passwords can only access that one thing.

    Edit: To be clear, the value is that you can use the same sentence everywhere, switching out the name of the service to generate semi-unique passwords for each service. Obviously someone analyzing your passwords would be able to figure out the pattern, but that’s basically never what actually happens; it’s more likely someone gets 1 password and tries your email address + that PW in a variety of services, which this is strong against.

    • OpenStars@startrek.website
      link
      fedilink
      English
      arrow-up
      3
      ·
      8 months ago

      I dunno, all I do is hit copy, then go to the website and hit paste, and that’s pretty easy as well:-P.

      I do need to step up my game for work though, b/c it keeps asking me a password multiple times a day so if I could rattle one off that would be better than having to open up my password manager and get it.

      • KoboldCoterie@pawb.social
        link
        fedilink
        English
        arrow-up
        2
        ·
        8 months ago

        It’s surprisingly easy to memorize. The sentence basically acts as a mnemonic device to remember the password, and it’s a lot easier to memorize a sentence that makes sense to you than to memorize something like “Tr0ub4d0r&8”.

    • The_v@lemmy.world
      link
      fedilink
      arrow-up
      1
      ·
      8 months ago

      I have a strict, “do I give a fuck” policy when it comes to security.

      I keep the harder to crack passwords for critical things like banking, etc… since there’s only a few I can remember them. I also always use MFA.

      For all the other shit that I don’t give a fuck if it’s hacked it’s the good old *Banana$1234" type password that I reuse for decades and save to firefox’s password manager.