News for hackers. Stuff that matters.

A comment on I hate password rules. Parent comment

Re:I hate password rules by iso1631 on Tuesday November 16, 2021 @03:17PM (#29245855)
If you're using a random password, c29b90b0e25ece3f2dabcef496d22103 is fine for a password, 2^128 bits. It's a right pain to type in on a console though.

On the other hand, "rundown skyline pluck shawl pastrami radar refueling poach prankster durable" is far easier to type and is about the same entropy

[ Parent | on HN ]
Re:I hate password rules by hannasanarion on Tuesday November 16, 2021 @04:18PM (#29246472)
The entropy is far greater than 2^128. Pastrami, refueling, and shawl don't appear in the top 30,000 English words list, so even knowing your password generation strategy, every word adds at least 15 bits of entropy, you're up to 150 bits, probably more.
[ Parent | on HN ]
Re:I hate password rules by iso1631 on Wednesday November 17, 2021 @08:47AM (#29252884)
My word list contains 7227 words apparently, so 12.82 bits per word

https://github.com/redacted/XKCD-password-generator

Not sure how many bits a "good" password should be nowadays.

[ Parent | on HN ]