Comment on Fuckin' passwords

trxxruraxvr@lemmy.world ⁨7⁩ ⁨months⁩ ago

• helvetpuli@sopuli.xyz ⁨7⁩ ⁨months⁩ ago

  Just to be clear: there is no reason anybody should be typing a password in 2025, other than maybe their master password for a keyvault. Also, 14 characters is not secure*. It needs to be at least 16, and that’s if you generate it randomly.

  Four randomly selected words, XKCD style is also good

  • according to Jeremi M Gosney, yer best source for password cracking and defense

  source

  • Ashiette@lemmy.world ⁨7⁩ ⁨months⁩ ago

    Aren’t dictionary bruteforcing really efficient ?

    source

    • LarsIsCool@lemmy.world ⁨7⁩ ⁨months⁩ ago

      Kind of, but also it doesn’t matter much: techcommunity.microsoft.com/blog/…/731984

      source

      • helvetpuli@sopuli.xyz ⁨7⁩ ⁨months⁩ ago

        In the context of things that rely on passwords for security it matters very much.

        The Microsoft blog post that you reference is about their systems which displace that reliance, for both better and worse.

        source
• helvetpuli@sopuli.xyz ⁨7⁩ ⁨months⁩ ago

  Exactly. I use KeepassXC, but Bitwarden is also good.

  source