Hacker News new | ask | show | jobs
by somehnguy 1094 days ago
If you can remember your passwords I have a strong suspicion that you’re using weak passwords and/or re-using them. All my passwords are 12+ (whatever the site max is) random alphanumeric+symbols and don’t get re-used across sites - there is no possible way I could remember them all.
2 comments

Diceware is easy to remember.

https://www.eff.org/deeplinks/2016/07/new-wordlists-random-p...

https://www.eff.org/dice

This generator uses a different wordlist with about 18000 words.

https://1password.com/password-generator

Using a quick back-of-the-napkin calculation, you get roughly this amount of entropy from 1password's wordlist when compared to random alphanumeric strings [a-zA-Z0-9]:

  - 5 words ≈ 12 chars
  - 6 words ≈ 14 chars
  - 7 words ≈ 17 chars
  - 8 words = 19 chars
If we take 5 words as the minimum you'd want to use on a web service:

  - halvers persia dutiful manes party
  - append medalist society duke disobey
  - acoustic halo assuage upkeep dexter
  - area theist motile align trespass
As a non-native English speaker (which should be obvious from my strained speech), I'd say it's rememberable enough.
9-12 characters upper and lower case with numerical and special characters, pretty much unique.