Hacker News new | ask | show | jobs
by tempestn 4268 days ago
His primary point is that people should not be choosing passwords at all, and should instead use a password manager, except for a select few passwords such as logins for computer and phone, and the password manager master password itself.

Yes, the correct horse battery staple has more entropy than most common passwords, but the point is that we don't need a way of generating better memorable passwords. We can already just generate random, long, completely non-memorable sequences of characters and store them in a password manager, and that's what we should be doing.

2 comments

I don't disagree with that primary point, but the "except..." is plenty of reason for recommending good mechanisms for password selection.
>people should not be choosing passwords

CHBS is a method for generating passwords, not choosing them.

OK, but its purpose is to generate memorable passwords. The point of the article is that focusing on making passwords memorable is counter-productive, since we shouldn't generally be trying to remember passwords. And if you're not trying to remember it, a string of 16 random characters works fine.
Yes and no. Secure and memorable passwords are still vital for securing your password manager. Having a means to generate them is not counter productive.