Using pepper to increase the security of stored passwords

Re:Using pepper to increase the security of stored passwords by Tade0 on Sunday March 03, 2019 @05:44AM (#19293810)

I read the first article.

Passphrases give us the ability to easily remember high entropy password values.

Passphrases are not high entropy once you take into account that they're words in a specific language.

[ Parent | on HN ]

Re:Using pepper to increase the security of stored passwords by isostatic on Tuesday March 05, 2019 @08:48AM (#19310445)

Depends how you pick them.

If you genuinely do

  grep "^[a-z]*$" /usr/share/dict/words|shuf -n 4

Then on my computer you're looking at 15638751293495759880 combinations, or about 2^64.

Pick them from your own day to day vocab and you're more likely in the 2^32 range.

[ Parent | on HN ]