Recent searches
Search options
Administered by:
Ryan's guide to determining whether your password is secure:
1) Did you pick it yourself? If yes, it is not secure.
2) Is it unique? If no, it is not secure.
3) Is it part of a "password system"? If yes, it is not secure.
4) Is created using a deterministic password generator? If yes, it's part of a "password system" and therefore not secure.
5) Did your password manager randomly generate it for you? If yes, it's probably fine.
6) Did you generate it with dice? If yes, it's probably fine.
7) Did you create your password in some other way? It's probably fucked.
Please rate my method of creating passwords:
I have a paperback book and use the first 12 characters of the first line at the top of the page including punctuation followed by the page number. I just use the next page every time I need a new password.
I ran l0phtcrack against my SAM file a while back and these passwords were the last to be brute forced…nearly a string of random letters with only one or two common words embedded. Do you use a similar tool for testing?
@djg I have written password crackers and cracked this kind of password with them.
@djg @ryanc
Let's remove some extraneous details and see if we can make this a little clearer:
"I use one or two dictionary words, in the exact order they would naturally come in a sentence, followed by a two or three digit number. Sometimes there will be a comma or period after one of the words."
It's not quite the combination to President Skroob's luggage but I think that rules one, four, seven and eight all apply here.
@djg @deeseearr @ryanc Wait, did you just give us a way to find the exact book you're using?
@tomasaschan @deeseearr @ryanc
Absolutely, the book I used to use anyway, I will have to ask Google AI to see if it can find this based on that information…
@djg I would say, not reliably secure. (And now that you've shared it, even less so)
Basically, it's a couple of random words, probably common words, plus some random letters and numbers.
That's possibly good enough for online password guessing, depending on how many random letters and numbers.
It might or might not withstand offline attack. I'd guess not. 12 characters isn't a lot these days, even if completely random, although it depends on the way passwords are being stored, and most of all, it also depends on who you are and why you are being attacked.
@ryanc