Contents
What should a security phrase be?
Choose a memorable quote or phrase and use only the first letter from each word. Vary the capitalization. Also include numbers and symbols, either as substitutions for letters or as a replacement for a full word.
What is a login phrase?
A passphrase is a sequence of words or other text used to control access to a computer system, program or data. A passphrase is similar to a password in usage, but it is generally longer for added security.
What is a good pass phrase?
A good passphrase should have at least 15, preferably 20 characters and be difficult to guess. It should contain upper case letters, lower case letters, digits, and preferably at least one punctuation character. No part of it should be derivable from personal information about the user or his/her family.
Which is an example of a Diceware process?
Diceware is the process of rolling a set of dice, which would indicate a random word from a pre-defined list. Depending on the desired security, more words are chosen. An example outcome of a Diceware process might be the password:
Which is more secure a Diceware password or a passphrase?
In your example, the length of your diceware generated password is less then the passphrase (however still very long compared to security standards nowadays), but as you stated yourself, you can create longer passwords when you want to.
Can a dictionary attack crack a Diceware?
As computers become stronger and faster, just add a word or two. According to this article, even if we have a password cracking mechanism optimized only for random passphrases, a.k.a. “passphrase token attack”, it’s still way more secure than the alternatives. Thanks for contributing an answer to Information Security Stack Exchange!
How many bits of entropy does Diceware give you?
Since log 2 (6) is about 2.6, Diceware gives you at least 2.6 bits of entropy per dice roll. One the other hand, there is no obvious way of estimating how difficult a long natural language passphrase like “Blue Light shines from the small Bunny onto the Lake” would really be for a password cracker.