News for hackers. Stuff that matters.

A comment on 49% of workers, forced to change passwords, reuse same one with minor change. Parent comment

Re:49% of workers, forced to change passwords, reuse same on... by pteraspidomorph on Saturday December 14, 2019 @05:12AM (#21788730)
I ran a few tests with zxcvbn using five words (only nouns and verbs) and it estimates the complexity at roughly the same as that of a 32 random alphanumeric character password with capitals. Is zxcvbn wrong?
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by ProZsolt on Saturday December 14, 2019 @07:18AM (#21789139)
It is correct if I don't know anything about you. Once I know you use a sentence, I would use a dictionary to attack your password
[ Parent | on HN ]
Re:49% of workers, forced to change passwords, reuse same on... by Dylan16807 on Saturday December 14, 2019 @01:10PM (#21791005)
Even knowing nothing, any sane password cracker would attempt five letter sentences long long before they even reached 30 character alphanumerics. And 30 characters is itself more than a thousand times easier to crack than 32.
[ Parent | on HN ]