Hacker News new | ask | show | jobs
by ef4 4811 days ago
Yes, but I'm highly confident that a significant fraction of users are not using passphra.se or similar.

They're making something up, and humans are extremely bad at generating high entropy that way.

1 comments

Yes, people should never come up with pass phrases out of their brains. A good entropy source is an absolute must. As I mentioned in another comment, even flipping through something like passphra.se until you find something especially memorable is shooting yourself in the foot because you're discarding an unknown amount of entropy.