Skip to content
This repository has been archived by the owner on Aug 5, 2020. It is now read-only.

Don't use too long words for passwords #162

Open
m-bra opened this issue Jan 16, 2017 · 2 comments
Open

Don't use too long words for passwords #162

m-bra opened this issue Jan 16, 2017 · 2 comments

Comments

@m-bra
Copy link
Collaborator

m-bra commented Jan 16, 2017

Example: "Bügeleisen4Sprechstundenhilfe" Is simply too long for a password.
Just don't use words from the wordslist that are >6 characters.

@TilBlechschmidt
Copy link
Member

Currently, passwords are limited to 8+4+8 symbols in total. The example password provided got generated with the old word-list. The problem with a letter count below eight is, that the entropy drops rapidly. Whilst there are about 4000 words @ eight letters there's only slightly below 1000 nouns for six letters.
The possible fixes are:

  1. Keep the maximum length at 20 symbols or eight characters per word
    or
  2. Search for some more nouns that have got less than six characters

@m-bra
Copy link
Collaborator Author

m-bra commented Jan 20, 2017

|{1000 nouns} * {4 digit-numbers} * {1000 nouns}| = 10,000,000,000. We could search for more nouns, but I think ten trillion possibilities should be enough.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

No branches or pull requests

2 participants