Off Topic > Off Topic
If you opened a paypal account before you were 18, close it now.
<< < (10/15) > >>
Ipquarx:

--- Quote from: Nonnel on April 30, 2017, 03:26:31 PM ---correct battery horse staple probably isn't very secure anymore, though

--- End quote ---
Well not that specific one (because it's been plastered all over the internet via xkcd) but 4 completely random words out of the dictionary in general.
Headcrab Zombie:

--- Quote from: Ipquarx on April 30, 2017, 03:25:06 PM ---Some people like to make secure passwords by having multiple words strung together.

For example, "correct battery horse staple" is 28 characters long, extremely easy to remember, and very secure. With an unreasonable character limit you can't do passwords like these.

--- End quote ---
To me, it's moreso that fact that "20 character limt" makes me thinks they're storing 20 characters in their database, instead of hashing
There's not much else reason to restrict the character length
Foxscotch:

--- Quote from: Ipquarx on April 30, 2017, 03:29:33 PM ---Well not that specific one (because it's been plastered all over the internet via xkcd) but 4 completely random words out of the dictionary in general.

--- End quote ---
only if someone is bruteforcing it by trying every combination of characters
dropbox's zxcvbn gives a better, more realistic, modern estimate of password strength, than just judging by length

you should be able to try it out on this page (but on principle you shouldn't type your real password, or anything similar, into this, for those of you who...... might)
ShadowsfeaR:
I'll keep mine open tyvm I use it too much.
Ipquarx:

--- Quote from: Foxscotch on April 30, 2017, 04:31:57 PM ---only if someone is bruteforcing it by trying every combination of characters
dropbox's zxcvbn gives a better, more realistic, modern estimate of password strength, than just judging by length

--- End quote ---
Even if you're trying words in general, it's still very secure. A bruteforce attack, if the attacker knew it was in the form of 4 english dictionary words with some form of separator (Which would be hard for them to come across), would still have



around 10^20 passwords to guess before they found it.
Navigation
Message Index
Next page
Previous page

Go to full version