6 ms·
Written on a scrap of paper in your wallet. only the password and no other info should be on the scrap. If you can memorize it, it is a bad password.
by RLG_RLG 15y ago
Written on a scrap of paper in your wallet. only the password and no other info should be on the scrap.
If you can memorize it, it is a bad password.
- bronson 15y agoThat's not strictly true. If you're careful and imaginative, with moderate effort you can commit a fair amount of highly random data to memory. You just can't expect to change it every month. This may be oversimplified, but it's the correct horse battery staple.
- eli 15y agoHmm, hope you don't take many vacations
- mckoss 15y agoMy password was randomly generated, has 85 bits of entropy and, it took me only a couple of days to memorize.
- Avshalom 15y agoEh, it depends, a random fragment of a very long poem for instance can be quite easy to memorize but at 80-90 words/300-400 characters long is pretty damn secure, doesn't even need to be written down then.
- kristianp 15y agohttps://www.xkcd.com/936/ https://www.xkcd.com/936/
- DanBC 15y ago"muscle memory" helps here. People only need to refer to the scrap of paper for the first couple of weeks of entering a password. Then that scrap can be securely stored somewhere else. (eg: In your "in case of death" box if you want people to have access when you die.)
- korny 15y agoWhat the? If you write it down, it's a bad password. Make it a pass phrase, make it long. And possibly store it in an encrypted password database, protected by a master pass phrase.