From stolen laptop to inside the company network

Re:From stolen laptop to inside the company network by dtech on Thursday July 29, 2021 @03:09AM (#27993714)

I don't understand these insanely long password requirements. How are they more secure than say a strong 8-char password?

Even with a 12 password policy I see most people just using 'MyP@ssword2021', so I guess with 64 characters most people will just use 'MyPassword(012..9){6}'

[ Parent | on HN ]

Re:From stolen laptop to inside the company network by teddyh on Thursday July 29, 2021 @06:30AM (#27994841)

IIUC, 8 characters is too short now. You should use at least, IIRC, 12 random characters. Or a multi-word passphrase of equivalent entropy.

[ Parent | on HN ]

Re:From stolen laptop to inside the company network by mattowen_uk on Friday July 30, 2021 @04:56AM (#28005909)

Yesterday I was playing with this:

https://www.my1login.com/resources/password-strength-test/

Along with this:

https://www.random.org/strings/

and I discovered that apparently, a 7 character password of random chars that includes a 0 (zero) is really hard to crack!

I wont be doing that though for my own passwords but it was interesting none-the-less.

[ Parent | on HN ]