Sunlis
Joined 14 years ago
Joined 14 years ago
I tried to find pictures to verify my idea, but every head injury picture I found was of an athlete.
https://en.wikipedia.org/wiki/Member_states_of_the_Commonwea...
What I typically do is give "important" services unique, random passwords (bank, personal email, work email; things that can do damage), and use one of a set of passwords for everything else. If one password gets found, then maybe only my Reddit, Skype and a few forum accounts are compromised. This has the advantage that I use the unique password frequently enough to memorize them, and non-unique passwords are used in a few places which results in them also being used enough that they are memorized.
If the cracker was trying to brute force a password, then they would have to try every available character in every valid position. Unless I'm misunderstanding something, and n-length password would take a similar amount of time to guess as any other n-length password with the same restrictions. The cracker doesn't know going into it that I only have letters in my password, so he has to use any valid character.
Perhaps a more useful system would be one that would let websites enter their password restrictions and tell them how secure their users' password can be with those restrictions.