[Utilizer]

Interesting way to generate a human-friendly and hard to guess passphrase.

[wally_bert]

Bookmark for later.

[RightFighter]

ThisIsAVerySecurePasswordPhrase

T#isI$Not

[MeganC]

The NSA doesn’t hack your passwords. The NSA calculates the hash key that’s generated by your password.

So “I Like Ice Cream” is not stored on your computer but the hash key of 7b783177134c3bfe95647ca3e12ddeb4 is stored on your computer and it can be calculated.

[PetroniusMaximus]

There are other ways of cracking passwords.

Like having one’s eyeballs pulled out or having a blowtorch applied to one’s genitals.

[Nevadan]

re: How to memorize your crazy passphrase

This is where I get in trouble. Every now and then my mind goes blank, and I can’t remember my 4 digit pin number on my ATM card. So just keeping my passphrase in my head would be a problem.

[Riflema]

I'd like to ask a (dumb) question: how do they know when they've cracked a password? If they know because the content is suddenly legible, what if you encrypt the content with one method, then encrypt the result using some other method.

Or an I missing something?

[Maurice Tift]

  Imagine your adversary has taken the lyrics from every song ever written, taken the scripts from every movie and TV show, taken the text from every book ever digitized and every page on Wikipedia, in every language, and used that as a basis for their guess list. Will your passphrase still survive?

  RamaLamaBoom5NakkaBamPowSmooNakka7

[bgill]

If BB wants to snoop, it will.

[thackney]

For years my passwords gave been acronyms made from phrases with numbers and symbols.

[goodnesswins]

bfl....computer security/passwords

[yefragetuwrabrumuy]

For just daily use passwords, Gibson Research Corporation has a website that refreshes with a string of 63 or 64 random characters, and you can help yourself to as many as you like.

https://www.grc.com/passwords.htm

Then *these* logins and passwords you would keep in a secure file vault with greater decryption protection.

I might add that it is very useful to keep a “master key” hidden in perpetual archive storage on some unimpressive websites around the world. Just a seemingly random stream of characters that you put there from somebody else’s computer.

[CodeToad]

The NSA doesn’t “guess” at passphrases. The author has no idea what it’s talking about.

[muir_redwoods]

Boston Mississippi is easy enough to remember. Replace every other “i” and “o” with 1 or 0 and it makes it pretty secure.

B0stonM1ssiss1ppi

Try Oklahoma City Minnesota or Islip Colorado.

[Faith65]

BKMK

[dennisw]

ping

[dfwgator]

[Pollster1]

An unforgettable phrase can be used for passwords. “The right of the people to keep and bear arms shall not be infringed” gives “TROTPTKABASNBI”. Make a few letters lower case and a few into numbers, and you have “Tr0tPTK@Ba5nB1”. Pretty good security, and memorable after typing it a few times. I prefer to use something only slightly better than “password123” for non-financial sites with highly secure passwords for things that matter.

[GOPJ]

...and that it uses a strong passphrase. Assume your adversary is capable of one trillion guesses per second.”

Ping