Re:Password expiration is dead, long live passwords
by __HYde on Monday June 03, 2019 @01:33PM
(#20085773)
The primary benefit of Diceware over a "random" string of characters is that it is easy to remember and truly random. With a password manager you don't need to remember the password and it will be generated truly randomly. A string of 11 random alphanumeric charatcers has more entropy than a 5 word diceware passphrase with the added benefit that it is less to type if you need to do so manually. But diceware can be a good idea for creating the master password for your password manager and if you do that you should probably use a 10 word passphrase rather than 5.
Re:Password expiration is dead, long live passwords
by throw0101a on Tuesday June 04, 2019 @01:18PM
(#20097120)
For anyone keeping score at home, some handy-dandy tables with entropy per symbol:
* https://en.wikipedia.org/wiki/Password_strength#Random_passw...
At what point is more entropy simply diminishing returns? Five random words gives you 64 bits, and six gives you 77 bits (each word = 12.9 bites):
* https://en.wikipedia.org/wiki/Diceware * https://www.rempe.us/diceware/#eff