How many of them can it try per second? 1 or less.
1 Like
Not only do some refuse to implement 2FA, use multi-step instead. Or use an insecure method by sending a code via SMS, insead of supporting something Aegis or Authy (nevermind Yubikey).
Passwords are usually stored as hash values which are always a given length. Hence the length of the password won’t affect the amount of storage it takes up.
Dr. Mike Pound has a few good videos on the subject.
In short:
- Use a PW manager.
- Make sure the master password is is not crackable.
- MFA for anything financial.
https://www.youtube.com/results?search_query=mike+pound+password
That image is so flawed on so many levels, starting by the entropy calculation, in reality it is 95 (ASCII table excluding the 1st 32 chars) to the 11th power (IRL passwords arent limited to the ASCII table). Problem is by using four words contrary to that image you only have 4 bits of entropy, dictionary based attacks are a thing after all… (plus its easier to guess after doing some OSINT because human brains will use whathever they have and aint going to be wildly different from what you like)
Chill bud. It’s a comic. It was never meant to be accurate, it was just to make a statement.
Be more like the real Lockon (aka Neil Dylandy), more laid back.
Oh i am chill, and you already know that the issue is the lie about passphrases being magically better while easier to guess(less tries) and not the accuracy…