Longer is always better, but a fully random password will always be stronger than a "memorable" password of equal length.
You need exactly one memorable password, and that should be the one to your password manager, maybe two if you need to log into your device first. From there everything else should be long and random. Hell, with most of them you don't ever even need to know your own passwords, the tool just handles them itself.
XKCD has it right that you need length over complexity, but it's also from 2011. Today, we very easily can and should get both.
All I see is ******* can you try copying and pasting it directly, or even typing it out manually? Maybe use the spoiler tag? Not sure I can help you if its just ******
On those occasions where just letting Librewolf generate a random-looking one isn't good enough and I need to actually remember a password, I get them by picking some random words from /usr/share/dict/british-english-insane and putting them together with small but memorable changes that would be difficult to guess.
Every time I do it, it feels like the best password I ever came up with.
Those random passwords are really hard to type correctly and even harder to pronounce. If you can pronounce it it, typing it suddenly becomes easier. How about using gibberish words you can pronounce and type. Sort of like goobaFodi3hesto/roli. Can't find any of that in a dictionary, but you can actually type it when needed.
Once I was bored so I downloaded a list of the top 100,000 passwords and counted how many have the name "Vlad" in them. It was 400-something I think. The more you know.
26 Comments
MSBBritain@lemmy.world · 27 pts · 156d
Passwords should be like bad experiences.
The more you remember the worse they were.
rockSlayer@lemmy.blahaj.zone · -5 pts · 156d
Disagree, correcthorsebatterystaple is probably more cryptographically secure than any random password you're using now, and it's extremely memorable
MSBBritain@lemmy.world · 12 pts · 156d
Longer is always better, but a fully random password will always be stronger than a "memorable" password of equal length.
You need exactly one memorable password, and that should be the one to your password manager, maybe two if you need to log into your device first. From there everything else should be long and random. Hell, with most of them you don't ever even need to know your own passwords, the tool just handles them itself.
XKCD has it right that you need length over complexity, but it's also from 2011. Today, we very easily can and should get both.
Jumi@lemmy.world · 1 pts · 156d
My password manager has no master password so I know literally not one of my passwords
slazer2au@lemmy.world · 7 pts · 156d
Until you remember that dictionary attacks exist and it's not that complex.
Using passwordmosnster that password is 76 years "to crack" as it is all lower case, English words.
Removing the e from staple increases the time to 98 centuries.
Mantzy81@aussie.zone · 2 pts · 156d
The benefits of changing that l to a capital I or 1 are immense
TranquilTurbulence@lemmy.zip · 7 pts · 156d
password123, we’ll always miss you 🩷
henfredemars@infosec.pub · 7 pts · 156d
If you’re lucky, you can get away with remembering just one for your password manager. That password hasn’t changed in over 10 years.
infinitevalence@discuss.online · 6 pts · 156d
NpO0LO$@Sxx^^u259Qx8R1S4
1UGAGmcuLjLM@BXl9W!Zmp
$P$ec7VrC#v1$@b^d8I7qOU9
rSQ8U4FeZ@AA8Ovd#uGJL68J
VxyfjhE7aziS&VJ7*@v&7tsH
ks$38BKxUK*^gsd5dOCMQ8@&
Here have some free passwords.
SippyCup@lemmy.world · 4 pts · 156d
I just use Hunter2
What do I need any of those for?
infinitevalence@discuss.online · 3 pts · 156d
All I see is ******* can you try copying and pasting it directly, or even typing it out manually? Maybe use the spoiler tag? Not sure I can help you if its just ******
SippyCup@lemmy.world · 3 pts · 156d
Hunter.2. .
But remove all the dots. Try that
infinitevalence@discuss.online · 2 pts · 156d
Nope still just *****.. so it added the periods for some reason but I still cant see the password.
SippyCup@lemmy.world · 3 pts · 156d
Oh. Ok I have an idea.
It's Hunter3
Ok I'm gonna change it to that tomorrow so it should work now
IAmNorRealTakeYourMeds@lemmy.world · 3 pts · 156d
Hhu6$$#oyBg6ii
and he's a premium password. it'll be 3.50$
cravl@slrpnk.net · 1 pts · 156d
I love that the ^ makes the rest of it superscript. Fwiw, using code tags would fix it.
MagicShel@lemmy.zip · 5 pts · 156d
What? No!
That's a list of terrible passwords.
damnthefilibuster@lemmy.world · 3 pts · 156d
Yeah, now my passwords are just random nonsense.
kbal@fedia.io · 3 pts · 156d
On those occasions where just letting Librewolf generate a random-looking one isn't good enough and I need to actually remember a password, I get them by picking some random words from /usr/share/dict/british-english-insane and putting them together with small but memorable changes that would be difficult to guess.
Every time I do it, it feels like the best password I ever came up with.
TranquilTurbulence@lemmy.zip · 2 pts · 156d
Those random passwords are really hard to type correctly and even harder to pronounce. If you can pronounce it it, typing it suddenly becomes easier. How about using gibberish words you can pronounce and type. Sort of like goobaFodi3hesto/roli. Can't find any of that in a dictionary, but you can actually type it when needed.
cravl@slrpnk.net · 3 pts · 156d
Once I was bored so I downloaded a list of the top 100,000 passwords and counted how many have the name "Vlad" in them. It was 400-something I think. The more you know.
HubertManne@piefed.social · 3 pts · 156d
it has never occured to me to put vlad in a password.
ilillilillilillililli@lemmy.world · 1 pts · 156d
hunter2 🥰
Una@europe.pub · 1 pts · 156d
You compliment me and I generate you secure password. I am like AI but better I am BI.
Petter1@discuss.tchncs.de · -3 pts · 156d
Passwords should not exist anymore in 2026 in my opinion (passkey, webAuthIn, OICD, SAML2, etc)
WhatAmLemmy@lemmy.world · 4 pts · 156d
Passwords are fine. It's people who should not exist.