Saturday, February 28, 2009

Ranting about password strength

Passwords are like Pants...Image by Richard Parmiter via Flickr

Password strength is determined by bits of entropy, not by what characters the password contains! The presence or absence of letters and symbols in the password only tells you how many bits each character is worth. I swear, if I visit another site that claims "sdjia82*" is a strong password (21.7 bits) but "lentilsoqkjanbuzzhornwkshqjzppdiwkokwel" (110.9 bits) is a weak password... [My thanks to http://rumkin.com/tools/password/passchk.php]

Be the first to reply!

Post a Comment

By submitting a comment you assert that it is your own original work and agree to grant a non-exclusive licence to Brandon Thomson to display it on log.bthomson.com.