this post was submitted on 27 Nov 2023
159 points (89.9% liked)
Asklemmy
43950 readers
672 users here now
A loosely moderated place to ask open-ended questions
Search asklemmy ๐
If your post meets the following criteria, it's welcome here!
- Open-ended question
- Not offensive: at this point, we do not have the bandwidth to moderate overtly political discussions. Assume best intent and be excellent to each other.
- Not regarding using or support for Lemmy: context, see the list of support communities and tools for finding communities below
- Not ad nauseam inducing: please make sure it is a question that would be new to most members
- An actual topic of discussion
Looking for support?
Looking for a community?
- Lemmyverse: community search
- sub.rehab: maps old subreddits to fediverse options, marks official as such
- !lemmy411@lemmy.ca: a community for finding communities
~Icon~ ~by~ ~@Double_A@discuss.tchncs.de~
founded 5 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Passwords. We assume a hard to guess and everchanging password will be hard to crack, but the whole point of machines is that it can be pinpointed with utmost accuracy, and everytime someone tells you to use special phrases in passwords, they're also inadvertently saying "hey thieves, here is what to look out for, happy guessing". They're supposed to be more like speakeasies.
I remember long ago, when I was active as Dabran2 on Neopets, there was a vault with nine dropdown menus that you had to guess the combination to on the moon Kreludor. It was simpler and far more effective. To this day, I couldn't tell you what's on the other side (or I'd have to annihilate you and feed your remains to the turmaculus, assuming you believe I made it to the other side).
Yeah knew a guy that used to work at a place where they had him change his password every 2 months or so kinda stupid. Entropy is really all you need to check. Also by special phrases do you mean ~~salting~~ peppering your passwords?
Salting and peppering isn't something you do; it's something the site does prior to hashing your password and storing the hash.
Yes you're correct but what I was referring to was using an extra string of characters to protect against a compromised password manager
Edit: Here's a link to bitwarden's website that further clarifies what I meant