News for hackers. Stuff that matters.

A comment on The man who wrote the book on password management regrets the error. Parent comment

Re:The man who wrote the book on password management regrets... by Xoros on Wednesday August 09, 2017 @10:21AM (#14969137)
What about having your own pattern for upper case and lower case in the words ?

Like, say, every 3rd letter of the words you choose will be upper. hoRse or baTtery etc...

[ Parent | on HN ]
Re:The man who wrote the book on password management regrets... by mediocrejoker on Wednesday August 09, 2017 @11:04AM (#14969748)
Someone who actually studies this stuff can maybe correct me but I think this adds only a single bit of entropy (multiplies the possible combinations by 2) and thus is almost negligible.
[ Parent | on HN ]
Re:The man who wrote the book on password management regrets... by Avernar on Wednesday August 09, 2017 @02:25PM (#14972159)
Nope, it's one bit extra entropy per character. The attacker must try all possible capitilazations of each word (horse, Horse, hOrse, HOrse, etc).

You've doubled the character set so it's not negligable.

[ Parent | on HN ]