Post #3870461
2026-07-16 16:48 UTC
I should build a similar table for passphrases. Because the XKCD "correct horse battery staple" approach that is commonly cited everywhere is flawed, and I get tired of explaining it in detail every time I call it out.
Replies (2)
-
@atoponce@fosstodon.org 2026-07-16 17:13
Much better. Note that you *can* reach the secure green level with the XKCD 4-word approch if: 1. The passphrase is randomly generated. 2. The words come from 7-dice Diceware. #passwords
-
@RandomDamage@infosec.exchange 2026-07-16 16:50
@atoponce@fosstodon.org it's certainly not perfect (lower entropy than it looks like), but I think it's still way better than most people would do without prompting.