Let’s talk about usernames

Re:Let’s talk about usernames by Natanael_L on Monday February 12, 2018 @09:32AM (#16358760)

3 words isn't nearly enough. Typically you'd want at least 6-7, or ideally 8-9.

[ Parent | on HN ]

Re:Let’s talk about usernames by AnIdiotOnTheNet on Monday February 12, 2018 @10:24AM (#16359155)

Depends on what you're protecting. Try not to lose sight of the idea that security doesn't exist in a vacuum.

[ Parent | on HN ]

Re:Let’s talk about usernames by Natanael_L on Monday February 12, 2018 @04:13PM (#16362208)

Xkcd's classical correct course battery staple is about 40 bits is entropy, while being selected uniformly at random from a fairly large pool of words.

I can assure you that the average user wouldn't get above 15 - 20 bits with self selected words. That's often worse than most current passwords.

[ Parent | on HN ]