Videos
I've looked at XKCD's correcthorse comic which discusses entropy. Even further I really like these two videos (1 and 2) that Computerphile made about strong passwords and how passwords are cracked. Even still I don't think I know enough about the two options to definitively say which is the superior option.
On one hand I love the introduction of special characters as well as the protection against dictionary attacks, on the other it's so many more characters which adds to the complexity by probably billions in orders of magnitude from a brute force angle.
Does anyone use this feature? I think it’s a critical component of a password manager, but the Bitwarden implementation seems very clunky. Curious whether this is generally used?
Full disclosure - we are an MSP looking to roll out to our client base and it seems like the way the generator is implemented would make it unlikely that users would use this - so I thought I would with the community whether you routinely use the password generator feature.
I screwed up using the password generator - lightly screwed, now recovered. I generated a new password and used it to change an online password. Then I spent about a minute looking for a button to transfer the new password to the now-changed account; I couldn't find a button, and by that time (one minute) my clipboard cleared. So there I was with a changed password that I didn't know. (Later I found the Password History, which would have saved me a little work.)
I recovered okay, but that leads me to ask, "What is the best way to use the password generator?" Unless there's a better idea, the next time I'll copy it to the notes section, then copy the old password down there, too, then copy the new one to the password box. That way I'll have both in case I forget to save something.
What's a better way to do this?
My default password generator length is set to 24. I would like to increase the default length, but I can't find anywhere in options/preferences to do so. Am I missing where this is set, or does Bitwarden just not support this?