Sin Trenton 🎱 (@[email protected])
todon.nl
Here is an example (no, not one I am using) of what a password of mine may look like: WW91IEtub3cgSG93IFRvIFNjYXJlIE1lIFNoaXRsZXNz And no, it is not hard to remember at all. I use offline, non-caching Base64 coders. https://www.base64decode.org #privacy #encryption #passwords

Also wanted to test linking a Mastodon post of mine to my Lemmy account. If anything bungles up, sorry in advance!

  • noodlejetski@lemm.ee
    42·
    1 year ago

    …or you could just use a password manager that generates random and unique passwords whenever you need, without you having to memorize multiple phrases (because you don’t want to reuse the same phrase across multiple accounts).

    • Fox Trenton@lemmy.mlOPEnglish
      2·
      1 year ago

      I do. I use a B64 password and a key file to my manager. In fact, I have three different files for my manager, one containing seldom used financial data, etc

      • gomp@lemmy.ml
        4·
        1 year ago

        Yes, but you only really need one (the one that unlocks your password manager) and you’ll quickly learn to type that relatively fast.

        • Devjavu@lemmy.dbzer0.com
          1·
          1 year ago

          Realtively, yes. But I myself like a 16 symbol or longer cryptic password because in the end when I have remembered it it takes less time to put in and has the same protection as a longer passphrase. (Not against brute force I am aware).

  • gomp@lemmy.ml
    2·
    1 year ago

    “You Know How To Scare Me Shitless” is 33 characters and a decent passphrase on its own.

    Base64 brings the length to 44 characters, but you might be better off by just using a longer passwphrase (eg. “You know how to scare me shitless and you do it every day, dear student of mine!” is 80 characters long, not much more difficult to remember that the 33-char one and way easier to type than the 44-char base64 one).

    All in all, IMHO base64 is not the best idea.

      • gomp@lemmy.ml
        1·
        1 year ago

        I wasn’t recommending OP to switch to an 80-character passphrase (see the very first sentence in my comment)… I was just showing that passphrases are about length and not about (real or perceived) randomness how difficult they are to memorize or type.

        Also, if I may, one shouldn’t throw terms like “unbreakable” around: security is a game where you trade usability for resilience to attacks and what how much security is enough security depends on your specific circumstances and risk profile… absolute terms like “unbreakable” picture security as something different than the compromise it is and should be left to marketing people.

        edit: (see correction above)