I was reading some questions on here regarding the correct horse battery staple
method, and the conclusion was that, assuming any words in the list of most common English words, every word adds about 10-11 bits of entropy, so the XKCD method was relatively correct in their conclusion.
Now, how much secure would that password be if you added random noise (actual random noise, generated from a proper PRNG) to that string? Say, for example, I had correct horse battery staple
as my password (ignoring the fact this sentence is pretty common) and then I added some noise, so I get 3orrezt hors bat8ery s9appe@
. How much more secure did it actually become? Or is there no point worrying about this kind of thing anyway?
Also, what about adding a small password inside the bigger sentence, for example, correct $58j#O1, battery staple
?
n
sides (where n is the number of characters in the string), and then rolling another dice with, say, 96 sides and changing the original value to the value obtained with the other dice. (BTW, I don't mean real dices, just a CSPRNG device). – MKII Aug 21 '15 at 22:56