How to create good passwords?

['Tis but a scratch]

Now, I'm not asking about things like "use long passwords with special symbols, use capital letters and numbers" and stuff like that. This is not hard to do. What is hard, however, is remembering all this stuff.

What I was thinking was selecting something, like the name of my favourite YouTuber, and switching the letters into different places in a way that allows me to easily remember the password, but to anyone unfamiliar with the technique makes the password look like random blob of letters. This technique results in passwords like this: "DsAkMrIoAkN1_3.0_9.1_9.9_9", which looks pretty random, but is actually very easy to remember. What do you think about this technique? Btw. the password I provided is not used anywhere, I created it specifically for this thread.

[Generation X SMURF]

Първоначално публикувано от Hwkiller:

Първоначално публикувано от OCeePC:

Doesnt take long to crack an encrypted file noawadays.. Even wifi WPA2 AES can be cracked. With a file like that you speak an offline crack wouldnt take long with cloud computing and GPUS

WPA2 AES is cracked due to a flaw in the handshake.

Good luck cracking the latest GPG/PGP encryption, ssh encryption, etc. With salting, rainbow tables become pointlessly large, and proper encryption on current hardware can take a theoretical billion years to crack.

Im just saying anything can be cracked. HW is limitless with cloud computing

[Hwkiller]

Първоначално публикувано от OCeePC:

Първоначално публикувано от Hwkiller:

WPA2 AES is cracked due to a flaw in the handshake.

Good luck cracking the latest GPG/PGP encryption, ssh encryption, etc. With salting, rainbow tables become pointlessly large, and proper encryption on current hardware can take a theoretical billion years to crack.

Im just saying anything can be cracked. HW is limitless with cloud computing

Not really. Cloud computing still isn't going to crack well encrypted files for thousands of years. Even if they could crack *a* password in, e.g., a year, websites *should* be salting the passwords which means that someone would have to target *a* password to crack rather than just targeting a particular algorithm and cracking the whole vector of passwords.

[B l u e b e r r y P o p t a r t]

I keep mine in a passworded .doc on a encrypted external harddrive.

[Hwkiller]

Първоначално публикувано от B l u e b e r r y P o p t a r t:

I keep mine in a passworded .doc on a encrypted external harddrive.

I'm willing to bet the password mechanism on a .doc file isn't too strong. Good on you for full drive encryption though. I haven't made that jump yet.

[B l u e b e r r y P o p t a r t]

Първоначално публикувано от Hwkiller:

Първоначално публикувано от B l u e b e r r y P o p t a r t:

I keep mine in a passworded .doc on a encrypted external harddrive.

I'm willing to bet the password mechanism on a .doc file isn't too strong. Good on you for full drive encryption though. I haven't made that jump yet.

You might be able to get into the doc without much effert maybe but even that is a jumble of random letters and numbers.

[Hwkiller]

http://superuser.com/questions/881063/how-long-would-it-take-to-break-a-1024-bit-openpgp-encrypted-email
That's 1024 bit.
https://www.quora.com/How-long-would-it-take-to-crack-a-RSA-4096bit-GPG-PGP-Encryption-Private-Key

In other words, good luck. :p

[Richard I]

I just generated a random 20 character password and memorized it every 3 numbers until I had the whole thing down.

[Mr. Shaggnificent]

I hate when they force conditions on you like, "Must contain..." whatever. My passwords are super dope and could only be broken with a keylogger or something, which would beat the silly requirements anyway.

[chiefputsilao✖️ping]

Първоначално публикувано от Hwkiller:

Първоначално публикувано от B l u e b e r r y P o p t a r t:

I keep mine in a passworded .doc on a encrypted external harddrive.

I'm willing to bet the password mechanism on a .doc file isn't too strong. Good on you for full drive encryption though. I haven't made that jump yet.

i once use a third party encryption called folder guard.
the problem arose when i forgot my folder guard pword.
i hade to nuke the whole drive to regain the space occupied by the encrypted folder.

[B l u e b e r r y P o p t a r t]

Първоначално публикувано от chiefputsilao.bad.ping☭:

Първоначално публикувано от Hwkiller:

I'm willing to bet the password mechanism on a .doc file isn't too strong. Good on you for full drive encryption though. I haven't made that jump yet.

i once use a third party encryption called folder guard.
the problem arose when i forgot my folder guard pword.
i hade to nuke the whole drive to regain the space occupied by the encrypted folder.

It didn't have a backup recovery passcode for it? Ouch, sorry I hope you didn't lose much.

[Washell]

Първоначално публикувано от OCeePC:

HW is limitless with cloud computing

If your argument contains limitless, infinite or similar terms when it comes to resources, you should take a step back and thinks things through. You're wrong by default because resources are never limitless. The cloud is made up of computers in datacenters that are paid for and maintained by commercial companies. If you can afford 10 million years of computing time in the cloud to crack a password hash, you won't be bothering to do so because you're the richest man on the planet anyway.

It only seems limitless to you because as a tiny little consumer you haven't managed to run face first into the very real and very present brick wall.

[xHodsrHTQRctqZDZ]

I use a mix of symbols, or special chars. E.g. !@# or CTRL + Backspace (Some passwords don't support this format)

[Eat3n]

Upper case and lower case letters, numbers, symbols, AND (when allowed) i like spaces so you can write out phrases not just one glob of words smashed together.

[Radical Left Lunatic]

Първоначално публикувано от OCeePC:

Първоначално публикувано от SerCartrite:

Password managers will save you much headache in this regard. I like KeePass.

http://keepass.info/

That can be hacked...

Best is to never store passwords in any kind of file

You can store passwords and other special information in a file that you "encrypt) using an algorithm that only you know. I store important things all the time on my computer without worries doing this.

[Generation X SMURF]

Първоначално публикувано от Washell:

Първоначално публикувано от OCeePC:

HW is limitless with cloud computing

If your argument contains limitless, infinite or similar terms when it comes to resources, you should take a step back and thinks things through. You're wrong by default because resources are never limitless. The cloud is made up of computers in datacenters that are paid for and maintained by commercial companies. If you can afford 10 million years of computing time in the cloud to crack a password hash, you won't be bothering to do so because you're the richest man on the planet anyway.

It only seems limitless to you because as a tiny little consumer you haven't managed to run face first into the very real and very present brick wall.

So you arguing whether anything can be cracked?