You definitely don’t want to be using these

  • Cousin Mose@lemmy.hogru.ch
    link
    fedilink
    arrow-up
    7
    ·
    11 days ago

    From my experience brute forcing passwords, no. It’s smart enough to try character substitutions and it annoys me so much that the FBI recommends this practice.

    • psx_crab@lemmy.zip
      link
      fedilink
      English
      arrow-up
      2
      ·
      11 days ago

      Wait it’s not? I remember some people in the industry recommend this sort of password albeit with variation of other random words as it’s pretty strong and would take a very long time to crack.

      • locuester@lemmy.zip
        link
        fedilink
        English
        arrow-up
        3
        ·
        11 days ago

        Indeed, just four impersonal words is a great password. Mix up the capitalization and it’s even better.

      • Cousin Mose@lemmy.hogru.ch
        link
        fedilink
        arrow-up
        2
        arrow-down
        3
        ·
        11 days ago

        If it’s a bunch of words found in any dictionary then with or without character substitution it’ll be easy to crack.

        • itslilith@lemmy.blahaj.zone
          link
          fedilink
          arrow-up
          4
          arrow-down
          1
          ·
          11 days ago

          It’s not. A dictionary has on the order of ≈100,000 (10^5) words in it. Picking five words entirely at random gives you 10^25 combinations, which is about the complexity of 14 alphanumeric characters. So pretty secure.