Reliable Strength Test for Master Password
Safe: Check the strength of password
Reliable Strength Test for Master Password : sysadmin
Password strength
correcthorsebatterystaple is a safe type of password. You don’t need special characters except to pass stupid “strength” tests.
The real question is: Where do you store all your never-reused passwords? The correct answer is: In a password manager. And that makes your question unimportant since the password manager generates strong random passwords, no thinking required.
More on reddit.comVideos
In light of the recent LastPass breech I looked at different strength test websites to see how long a password would hold up under a offline brute-force attack.
The password I tried was: Aband0nedFairgr0und
This is a a 19 character password with a combination of uppercase/lowercase/numbers (no special characters)
I went to 5 different password strength sites and they all give me wildly different results for how long it would take to crack.
| https://www.security.org/how-secure-is-my-password/ | 9 quadrillion years |
|---|---|
| https://delinea.com/resources/password-strength-checker | 36 quadrillion years |
| https://password.kaspersky.com/ | 4 months |
| https://bitwarden.com/password-strength/ | 1 day |
As you can see the results are all over the place!
Can anyone recommend the best/ most upto date resource to check password strength. I am sure people with bitcoin mining farming GPUS can crunch 100s of guesses per second.
PS: Dont worry, Aband0nedFairgr0und is not a password I use and was made up as a test.