You are mostly correct it is length * (possible char values).
See passphrase generator.
Comment on God ****** dammit, here we go again
blazeknave@lemmy.world 4 days agoAlso, length is most of what matters. A full length sentence in lowercase with easy to type finger/key flow for pw manager master, and don’t know a single other password. Can someone correct me if I’m wrong?
Rooster326@programming.dev 4 days ago
logos@sh.itjust.works 3 days ago
Correct horse battery staple
TachyonTele@piefed.social 2 days ago
That was my sisters name!
eleijeep@piefed.social 4 days ago
You are mostly correct it’s (possible char values) ^ length.
slumberlust@lemmy.world 4 days ago
As always, the most secure password is the least convenient and accessible. It’s a trade off, but you want fewer dictionary words and patterns overall. Preferably with a physical component for the master password.
Longer is better…giggitty.
Vigge93@lemmy.world 4 days ago
I’ve found that there are a handful of passwords that you need to remember, the rest can go in the password manager. This includes the password for the password manager, of course, but also passwords for your computer/phone (since you need to log in before you can access the password manager), and your email (to be able to recover your password for the password manager).
You are also correct that length is mostly what matters, but also throwing in a random capitalization, a number or two, and some special character will greatly increase the required search space. Also using uncommon words, or words in different languages than english can also greatly increase the resistance to dictionary attacks.
sugar_in_your_tea@sh.itjust.works 4 days ago
If your password manager has a password recovery mechanism, that means your key is stored on the server and would be compromised in a breach. If that’s the case, I highly recommend changing password managers.
The ideal way a password manager works is by having all encryption done client-side and never sending the password to the server. If the server cannot decrypt your password data, neither can an attacker. That’s how my password manager works (Bitwarden), and I highly recommend restricting your options only to password managers with that property.
If you need a backup, write it in a notebook and keep it in a safe. If your house gets broken into, change your password immediately before the thief has a chance to rifle through the stuff they stole. My SO and I have shared passwords to all important credentials, so that’s out backup mechanism.
Jakule17@lemmy.world 4 days ago
Okay, but hackers don’t have to know whether I used special character or just lowercase? Or am I stoopid?