How to create a password not even a supercomputer could break

[gregmcc]

Create secure password and then use a online service to 'test' (And capture) it

 

[Bryn]

Just use a short sentence but substitute spaces with another special character:

I#eat#peas#with#honey

I've!done!it!all!my!life

It%makes%them%taste%quite%funny

but@it@keeps@them@on@the@knife

Before you assume it's secure, always check lists like this:

https://raw.githubusercontent.com/d...ials/10-million-password-list-top-1000000.txt

No need to brute force when you can use password lists.

Which is why I don't advise using systems with words that must be remembered. Screw that. It's 2018 - use a password manager like Bitwarden.

This is a password I just generated using Bitwarden's Chrome extension:
Kmjug%7Z73QH%scn%$C*ni5m%rH%yg

30 characters long - 312 undecillion years to crack according to How Secure is my Password. This plus a YubiKey 4 is all the security the average consumer should bother with. Very unlikely you're going to be the point of entry if your account somewhere is hacked.

 

[theratman]

I've always used qwerty as my password, yet to be hacked

 

[Hamster]

Are we doing this again?
/waits for xkcd cartoon of a decade ago

 

[AirWolf]

Are we doing this again?
/waits for xkcd cartoon of a decade ago

Calling @bdt - your services required here.

 

[AirWolf]

1Password

A fine solution, but not worth the cost imo. Bitwarden is excellent and Premium costs $10 a year.

Bitwarden is open source, so not too likely.

1Password is a service, not a password

Yes, I am aware of that - just did it for comparison with the one with characters in the name.

 

[Bryn]

Are we doing this again?
/waits for xkcd cartoon of a decade ago

From all the way back in 2014:

https://boingboing.net/2014/02/25/choosing-a-secure-password.html

This is why the oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick.

 

[Hamster]

From all the way back in 2014:

https://boingboing.net/2014/02/25/choosing-a-secure-password.html

2011: http://preshing.com/20110811/xkcd-password-generator/

 

[Bryn]

2011: http://preshing.com/20110811/xkcd-password-generator/

All the more pertinent then.