You can achieve this with a one-liner: shuf -n 4 /usr/share/dict/words
This is top comment material.
Show HN: Correct Horse Battery Staple password generator
11–20 of 99 posts
Re: Show HN: Correct Horse Battery Staple password generator
#12While I would love to use something like this, almost every site I can think of enforces worthless password rules like "Must include number, letter, special character" etc which effectively blocks these types of passwords.
I don't think the password managers do, for master passwords. So if you ever consider it, you can set your master password to a strong one generated here and let the pw manager generate those 30 char random strings that fill all of the requirements for the other sites.
Re: Show HN: Correct Horse Battery Staple password generator
#13I rely on the built in password generator of Passfindr https://passfindr.com using the same random number generator as mentioned in correcthorse.pw. When using a Password Manager, and one should, different passwords for every internet account is straight forward.
Re: Show HN: Correct Horse Battery Staple password generator
#14You can achieve this with a one-liner: shuf -n 4 /usr/share/dict/words
This reminds me of the infamous Dropbox comment: https://news.ycombinator.com/item?id=9224
Re: Show HN: Correct Horse Battery Staple password generator
#15While I would love to use something like this, almost every site I can think of enforces worthless password rules like "Must include number, letter, special character" etc which effectively blocks these types of passwords.
Much like /u/hprotagonist above, I tend to use passwords like this for my pw manager, full disk encryption, PGP, etc. where I get to set the rules. Web sites or other uses outside my control get a randomly generated string of varying length.
It doesn't have to be all or nothing and is probably better if it isn't.
Re: Show HN: Correct Horse Battery Staple password generator
#16You can achieve this with a one-liner: shuf -n 4 /usr/share/dict/words
[deleted]
Re: Show HN: Correct Horse Battery Staple password generator
#17For passwords I might have to enter by hand, such as WiFi passwords, I liked the pronounceable password option that 1Password used to have. The passwords were several single syllables string together by a separator. An example: neg-pen-nau-eng-fri-dot. There were options to change the separator, and to toss in digits and upper case if I remember correctly. Syllables were 2 to 4 letters long, I believe.
At some point 1Password dropped that, replacing it something similar to "correct horse battery staple". It's words (3-10) separated by hyphen, space, period, comma, or underscore. E.g., "plasma.haggis.arrange.stultify".
Re: Show HN: Correct Horse Battery Staple password generator
#18I know XKCD made a comic and everything, but isn't this type of password exactly why dictionary attacks exist?
Re: Show HN: Correct Horse Battery Staple password generator
#19While I would love to use something like this, almost every site I can think of enforces worthless password rules like "Must include number, letter, special character" etc which effectively blocks these types of passwords.
You can always 1337 the password.
Re: Show HN: Correct Horse Battery Staple password generator
#20I know XKCD made a comic and everything, but isn't this type of password exactly why dictionary attacks exist?
The whole point of the xkcd comic is that even if someone is using the same dictionary, the phrase has sufficient entropy to be secure.