Correct Horse Battery Staple: Secure Password Generator
correcthorsebatterystaple.net
Correct Horse Battery Staple: Secure Password Generator
1–10 of 61 posts
Re: Correct Horse Battery Staple: Secure Password Generator
#2It's a cute idea and I love the concept from XKCD, but the best practice is just to use a password manager and stop trying to remember passwords (and absolutely never reusing passwords).
Re: Correct Horse Battery Staple: Secure Password Generator
#3See also (mostly for fun / ideas); http://www.manly-man.net/
Re: Correct Horse Battery Staple: Secure Password Generator
#4Would be neat if it had stable diffusion powered image generation, to help people visualize and remember their passwords.
Re: Correct Horse Battery Staple: Secure Password Generator
#5This could really use a entropy measure for the options you pick. Also what is the default dictionary?
If it is diceware, then the site's default 4 words hasn't been considered secure for a while. There is an Ars Technica article from 2014 that says 6 should be the minimum. I bet it is higher now.
Re: Correct Horse Battery Staple: Secure Password Generator
#6It's a cute idea and I love the concept from XKCD, but the best practice is just to use a password manager and stop trying to remember passwords (and absolutely never reusing passwords).
But:
- you need a password for your password manager
- you also need a password for your actual desktop/phone, when the manager is inaccessible.
- you may have a work computer requiring a different password as well
Here are already 3, ideally different, passwords you need to remember.
Re: Correct Horse Battery Staple: Secure Password Generator
#7But having a wordlist of ~2281 words means the search space is 2281^4 = 2.7e+13 which is less than an ascii password (roughly 100 usable ascii characters?) of length 7 i.e. 100^7 = 1e+14
Re: Correct Horse Battery Staple: Secure Password Generator
#8It's a cute idea and I love the concept from XKCD, but the best practice is just to use a password manager and stop trying to remember passwords (and absolutely never reusing passwords).
[deleted]
Re: Correct Horse Battery Staple: Secure Password Generator
#9There are a number of such generators, but this one has good defaults (with the number at the end).
IMHO, it would be better if it would generate a list of passwords, so if the site is malicious, it wouldn't know which one you picked. It's weak, I know... But for this reason, I like this one: https://xkpasswd.net/s/
Re: Correct Horse Battery Staple: Secure Password Generator
#10It's a cute idea and I love the concept from XKCD, but the best practice is just to use a password manager and stop trying to remember passwords (and absolutely never reusing passwords).
Most humans create terrible passwords (myself included) and I really benefit from simply having a random word generator. I use generators like these to create a random word cloud to pick and chose from to create my actual password. I also might have to read particular passwords over the phone to someone in a rare emergency so real words help with that a lot. This particular one doesn't throw enough random symbols in between words IMO, I also like to throw in misspellings and random caps which none of them seem to do.