Hacker News new | ask | show | jobs
by salibhai 4096 days ago
This is actually pretty cool.

From the article: Not too bad for a passphrase like “bolt vat frisky fob land hazy rigid,” which is entirely possible for most people to memorize. Compare that to “d07;oj7MgLz’%v,” a random password that contains slightly less entropy than the seven-word Diceware passphrase but is significantly more difficult to memorize.

At one trillion guesses per second — per Edward Snowden’s January 2013 warning — it would take an average of 27 million years to guess this passphrase.

3 comments

The other advantage? It's generally faster /easier for someone to type something like "bolt vat frisky fob land hazy rigid" than "d07;oj7MgLz`%v,". At least it is for me.
It's easier on keyboards (since we spend most of our time typing lowercase letters as part of text) and also on mobile (since you don't need to do annoying and error-prone context switching for capital letters or symbols).

I think this is one of the greatest unspoken benefits of Diceware-style passphrases!

I actually can remember a password like the d07 one easier because of keyboard pattern matching. That's how I generate passwords is I draw patterns on the keyboard. It's so unpopular that nobody creates tables for keyboard patterns entries.
I created an account just for you....

https://github.com/Rich5/Keyboard-Walk-Generators

Is the one trillion guesses per second with or without the key-stretching (hashing the master password N number of times)?