Live data from Hacker News

Ask HN: Tips for generating easy to remember but difficult to crack passwords

news.ycombinator.com

11–20 of 21 posts

Re: Ask HN: Tips for generating easy to remember but difficult to crack passwords

#11
I would pick a word or name, and for each letter of the given word you create a sentences beginning with each letter. It doesn't need to make sense, you just need to make it easy to remember. Bonus point by adding a number (like a year date related to the word/name) and by separating each word with a special character.

For example : Alice Amendment%Liability%Indicates%Cute%Energy2006

Re: Ask HN: Tips for generating easy to remember but difficult to crack passwords

#15

I have 3 base passwords --- easy, moderate and difficult. Easy is for junk I don't really care about. Moderate is for stuff I do care about but doesn't contain any personal info. Difficult is for things that involve personal info. Here is the fun part --- I have a 4th category called "critical" for extra security. In these cases, I combine the difficult base with one of the other two and then add a special context ch…

I used to have a very similar "system", until I locked myself out of an external hdd which I had veracrypt-ed with a super extra secure combination.

After a few months without using that hdd I forgot the password, but because I knew the basic bits that formed the password I generated all the possible permutations and brute-forced my way back. :D

The third time that happened I just decided to save the password on bitwarden...

Re: Ask HN: Tips for generating easy to remember but difficult to crack passwords

#16
post #15

I have 3 base passwords --- easy, moderate and difficult. Easy is for junk I don't really care about. Moderate is for stuff I do care about but doesn't contain any personal info. Difficult is for things that involve personal info. Here is the fun part --- I have a 4th category called "critical" for extra security. In these cases, I combine the difficult base with one of the other two and then add a special context ch…

I used to have a very similar "system", until I locked myself out of an external hdd which I had veracrypt-ed with a super extra secure combination. After a few months without using that hdd I forgot the password, but because I knew the basic bits that formed the password I generated all the possible permutations and brute-forced my way back. :D The third time that happened I just decided to save the password on bitw…

There is no rule that says you can't back up your passwords too.

For backup, I create a file with shorthand clues up made up of the first letter of each base password. For example s..h..

Even if someone finds this, they still have a lot of work to do.

Re: Ask HN: Tips for generating easy to remember but difficult to crack passwords

#18

Use password manager, generate long ass random passwords, never have to remember them

Or just four words with a symbol. Most password managers can create this pattern. Very handy if you ever need to retype a password.

Re: Ask HN: Tips for generating easy to remember but difficult to crack passwords

#19
post #14

https://xkcd.com/936/

Highly vulnerable to dictionary attacks though. Toss a punctuation in there at least.

Not convinced TBH.

If the words are chosen randomly from a large dictionary, it should be fine.

See https://security.stackexchange.com/questions/62832/is-the-of...

Post reply on HN