Sunday, February 17, 2019

Random Password Generator - Word Based Passwords not so Secure

Just a reminder for everyone when it comes to password strength, longer is better generally at the XKCD comic suggests.

But there been allot of push-back lately with the use of words, in passwords. Generally, users use pick predictable words, such as Company names, Pet names, Sports teams, Seasons (“Summer2024!”), Common phrases (“LetMeIn123”), Common sayings ("what goes up must come down") or lyrics ("You say, "Yes", I say, "No" You say, "Stop" and I say, "Go, go, go" Oh, no!"). 

That exact phrase is now in every cracking dictionary. A dictionary attack is when an attacker tries passwords from a pre‑built list of likely strings, not just literal dictionary words.

Security depends on entropy, not just length. Randomness matters.




source : https://xkcd.com/936/




































Re: HashCat, an open-source password recovery tool, can now crack an 8 character Windows NTLM password hash in less than 2.5 hours.

No comments:

Post a Comment