Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Follow Randall's advice, but take the first letter of each word in your sentence. You don't even have to come up with a particularly random phrase, take a song lyric. Doesn't match any common password pattern (i.e. 'someRealWord[digits]'), and it's still very easy to remember.


Your method is vastly different from Randall's method, each word there gets 11 bits of entropy because it's randomly chosen.

In properly formed English sentences, each character only has about 1 to 1.5 bits of entropy, and I'm not certain that taking the first letters of words in a sentence would have much higher per-character entropy than that, as the first letters of words are not very randomly distributed.


Did you even read the article? The whole point is that you SHOULD NOT do this, or try any other 'simple' method of remembering passwords.


Oh dear, maybe read through the rest of the article first.


What makes this any more secure than using the complete phrase?


The point of the article is that you still need a password manager; even if you use an easy-to-remember, yet still strong 'master' pw.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: