Passphrases You Can Memorize That Even the NSA Can’t Guess
1–10 of 57 posts
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#2Interesting rewrite of the actual title :P
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#3This is actually pretty cool.
From the article: Not too bad for a passphrase like “bolt vat frisky fob land hazy rigid,” which is entirely possible for most people to memorize. Compare that to “d07;oj7MgLz’%v,” a random password that contains slightly less entropy than the seven-word Diceware passphrase but is significantly more difficult to memorize.
At one trillion guesses per second — per Edward Snowden’s January 2013 warning — it would take an average of 27 million years to guess this passphrase.
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#4I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly.
It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#5These kinds of passwords remind me of gfycat URLs.
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#6A mechanism to implement XKCD's password recommendation: http://xkcd.com/936/
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#7I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
If your pass phrase already exists online somewhere (song lyrics, quote, meme) it's much much less safe than seven random words.
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#8I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
A line from a song is far weaker entropy-wise due to grammar. I wonder by how much. Common songs/writings would be vulnerable to a dictionary type attack.
As for the hundreds of passwords in your list, I'm convinced a password manager with a master password/3rd party auth/dongle is the way to go. Otherwise it's impossible to have unique passwords for all sites, rotate them, and remember them. Of course the risk is of losing the dongle.
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#9Interesting rewrite of the actual title :P
We're at the point where we're more worried about NSA then a random attacker, as we should be.
Re: Passphrases You Can Memorize That Even the NSA Can’t Guess
#10I can't imagine doing this for the hundreds of passwords in my list, especially when I change some of them regularly. It could be useful for a master password, though - such as the one that secures my password list. Isn't just remembering a line from a song a little easier? Then you get a password recovery mechanism too, as long as you remember the song, or at least the artist!
The article mentions using this for your master password. Quote: "For logging in to websites and other servers, use a password database. [...] Then lock up all your passwords behind a master passphrase that you generate with Diceware."