Is it a good idea to hash(SHA-512/whirlpool) some simple memorable string and use it for passphrase(for LUKS/TrueCrypt container), instead of using just a string like t4k#La93Fs(5w5) as a passphrase?

1 Answer 1

  • If this means you're effectively using the same passphase everywhere, then: this is a very bad idea.
  • If you're generating a new password each time anyway (as you should), why not use an actual random string, like in your example?


Also, in real world usage, a sha512 hash will be too long for many sites (that is: you can't set a password that long)

  • I didn't mention but the passphrase is for LUKS/TrueCrypt container.
    – passphrase
    Dec 5, 2013 at 23:23
  • 1
    Basically, with your method there would be a theoretical increase in security as the hash will be longer than a "simple passphrase", but in practice a "correct horse battery staple" (xkcd.com/936) type passphase is just as strong, and doesn't require an extra tool to hash your phrase every time you need the password.
    – Joel L
    Dec 6, 2013 at 12:13

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .