21–30 of 61 posts
A local diceware generator is probably available in your package manager, e.g:
sudo apt install diceware
diceware -n 6
QuickenPrisonThermosDefilingBasicsVengefulBut having a wordlist of ~2281 words means the search space is 2281^4 = 2.7e+13 which is less than an ascii password (roughly 100 usable ascii characters?) of length 7 i.e. 100^7 = 1e+14
Such as the Generate Password would be listed as:
> Correct Horce Battery Staple
> "Correct Horse-with-a-C Battery Staple"
But having a wordlist of ~2281 words means the search space is 2281^4 = 2.7e+13 which is less than an ascii password (roughly 100 usable ascii characters?) of length 7 i.e. 100^7 = 1e+14
I had a idea similar to this, where you would misspell one or two words randomly - and then generate a sentence below the password to help with remembering the built-in obfuscation. Such as the Generate Password would be listed as: > Correct Horce Battery Staple > "Correct Horse-with-a-C Battery Staple"
There are a number of such generators, but this one has good defaults (with the number at the end). IMHO, it would be better if it would generate a list of passwords, so if the site is malicious, it wouldn't know which one you picked. It's weak, I know... But for this reason, I like this one: https://xkpasswd.net/s/
Earlier quoted context omitted.
I had a idea similar to this, where you would misspell one or two words randomly - and then generate a sentence below the password to help with remembering the built-in obfuscation. Such as the Generate Password would be listed as: > Correct Horce Battery Staple > "Correct Horse-with-a-C Battery Staple"
Why not just use "Correct Horse-with-a-C Battery Staple" as your password then?
IMO the days of remembering multiple passwords are gone - either use a password manager, or thankfully the industry is moving to passkeys.
But having a wordlist of ~2281 words means the search space is 2281^4 = 2.7e+13 which is less than an ascii password (roughly 100 usable ascii characters?) of length 7 i.e. 100^7 = 1e+14
Earlier quoted context omitted.
Why not just use "Correct Horse-with-a-C Battery Staple" as your password then?
Adding grammar will make it more predictable and less secure for the same word count.
Promoting diceware is admirable, but I don't like the idea of trusting a remote website generator. A local diceware generator is probably available in your package manager, e.g: sudo apt install diceware diceware -n 6 QuickenPrisonThermosDefilingBasicsVengeful
cat /usr/share/dict/words | shuf | head -n 4Promoting diceware is admirable, but I don't like the idea of trusting a remote website generator. A local diceware generator is probably available in your package manager, e.g: sudo apt install diceware diceware -n 6 QuickenPrisonThermosDefilingBasicsVengeful
For all of its faults, 5x six-sided dice looking up this wordlist (https://theworld.com/~reinhold/diceware.wordlist.asc) is something that can be accomplished by hand, without computer assistance.
Assuming you have trustworthy dice (they don't have to be perfectly balanced, just something you can trust to be random), then you can diceware your own password by hand.