3
votes
2answers
129 views

Computing entropy for a passphrase ( minimal word length … )

Edit: 2013-05-17 After reading first answer from Tom Leek and some docs around the web, I've begin to write some options to my tool genpassphrase.pl: $ ./genpassphrase.pl -h Usage: genpassphrase.pl ...
-2
votes
6answers
335 views

Are passwords made up from concatenating a few foreign words better than shorter random characters?

Does it make sense to insert a foreign word into a paraphrase to mitigate against brute force? For example: "pussiMeansCatInEskimo" "caballoMeansHorse" "CatIsGatto" "SalopeMeansBitch" ...
7
votes
1answer
2k views

Can a dictionary attack crack a Diceware passphrase?

Everyone knows the words used in Diceware passwords (all 6^5 = 7776 words are published) -- they're all common words. Everyone seems to know that we're not supposed to use dictionary words for ...
5
votes
2answers
549 views

How should I make diceware passphrases more memorable?

I find that truly random diceware passphrase, more often than not, either contain a word that is easily misspelled or has an order that is illogical. I think there are three ways to make a diceware ...