Hacker News new | ask | show | jobs
by LastMuel 1115 days ago
I had a idea similar to this, where you would misspell one or two words randomly - and then generate a sentence below the password to help with remembering the built-in obfuscation.

Such as the Generate Password would be listed as:

> Correct Horce Battery Staple

> "Correct Horse-with-a-C Battery Staple"

2 comments

Why not just use "Correct Horse-with-a-C Battery Staple" as your password then?
My thought was that it would add some protection against a dictionary attack.

"Horse-with-a-C" is a longer password, but could possibly be hit using an algorithm that expects "with-a-[letter]" to be generated as part of a password.

The randomized misspelling of a word-or-two was intended to break a dictionary attack.

Adding grammar will make it more predictable and less secure for the same word count.
It doesn't reduce the entropy any, so I don't see how it could be less secure (assuming you don't count "with a C" as the additional words, which obviously you wouldn't).
What’s the point? Obfuscation doesn’t increase entropy.
The obfuscation is to break a dictionary attack.