Password length vs Average time to crack using Brute Force Hacking

[Mave]

 

[Impulse]

Using bruteforce and only using a certain amount of characters. If special characters were allowed you'd have a safe password much faster.

 

[Panki]

Using bruteforce and only using a certain amount of characters. If special characters were allowed you'd have a safe password much faster.

It's still easier to remember a simple long password than a complex short one. Obligatory xkcd:

 

[Mave]

Using bruteforce and only using a certain amount of characters. If special characters were allowed you'd have a safe password much faster.

It's still easier to remember a simple long password than a complex short one. Obligatory xkcd:

I agree that this is indeed better for bruteforce.
But if they also use libraries of words to crack your password, wouldn't the correcthorsebatterystaple be easier to guess?

 

[Panki]

Using bruteforce and only using a certain amount of characters. If special characters were allowed you'd have a safe password much faster.

It's still easier to remember a simple long password than a complex short one. Obligatory xkcd:

I agree that this is indeed better for bruteforce.
But if they also use libraries of words to crack your password, wouldn't the correcthorsebatterystaple be easier to guess?

Using correcthorsebatterystaple is fucking retarded, because I'm sure it appears in every library out there by now. Libraries can be pretty effective, but as far as I'm concerned they only employ single words.
Rainbow Tables are a better approach than bruteforce, if you have the storage space.

 

[Mave]

Using bruteforce and only using a certain amount of characters. If special characters were allowed you'd have a safe password much faster.

It's still easier to remember a simple long password than a complex short one. Obligatory xkcd:

I agree that this is indeed better for bruteforce.
But if they also use libraries of words to crack your password, wouldn't the correcthorsebatterystaple be easier to guess?

Using correcthorsebatterystaple is fucking retarded, because I'm sure it appears in every library out there by now. Libraries can be pretty effective, but as far as I'm concerned they only employ single words.
Rainbow Tables are a better approach than bruteforce, if you have the storage space.

Ah I thought so, thanks for confirming.

 

[Stybar]

Just to add a bit of fire to the discussion: Why not use something like correccthorsebatterystaple, but then substitute several letters (one per "word, for example) with a numeral? Like C0rrectHors3B4tterySt4ple? You still get the length, but now with extra difficulty due to the added numerals. Add some symbols in there too, and you're set.

How about Ch33secake&C0ca-cola ?
Simple food and drink (easy to remember), alphanumerical(simple replacements, so not that difficult to remember) and special symbols (at logical places), and lengthy (20 long).

 

[Mave]

Just to add a bit of fire to the discussion: Why not use something like correccthorsebatterystaple, but then substitute several letters (one per "word, for example) with a numeral? Like C0rrectHors3B4tterySt4ple? You still get the length, but now with extra difficulty due to the added numerals. Add some symbols in there too, and you're set.

How about Ch33secake&C0ca-cola ?
Simple food and drink (easy to remember), alphanumerical(simple replacements, so not that difficult to remember) and special symbols (at logical places), and lengthy (20 long).

That does sound like it would be indeed hard to crack AND easy to remember.
I use different passwords for every website though, and I always generate them here: http://strongpasswordgenerator.net/

Now that we're a bit on the subject: Does anybody use Keepass? I'm considering using it, but am also wondering how secure it actually is.

 

[Panki]

Just to add a bit of fire to the discussion: Why not use something like correccthorsebatterystaple, but then substitute several letters (one per "word, for example) with a numeral? Like C0rrectHors3B4tterySt4ple? You still get the length, but now with extra difficulty due to the added numerals. Add some symbols in there too, and you're set.

How about Ch33secake&C0ca-cola ?
Simple food and drink (easy to remember), alphanumerical(simple replacements, so not that difficult to remember) and special symbols (at logical places), and lengthy (20 long).

That does sound like it would be indeed hard to crack AND easy to remember.
I use different passwords for every website though, and I always generate them here: http://strongpasswordgenerator.net/

Now that we're a bit on the subject: Does anybody use Keepass? I'm considering using it, but am also wondering how secure it actually is.

I don't.