← Back to context

Comment by mkl95

4 years ago

Hold my beer for a few billion years while I crack it.

The bounty password looks like 2 names, a type of flower, and a two word object. That significantly reduces the search space. Though, it's likely at least one of those words are non-standard or wouldn't be found in any wordlist.

  • All words appear in some wordlist.

    This is the kind of password I use to protect my actual secrets. So if someone is able to crack it, I'd like to know. The bounty is for a 'realistic' use case.

    • If you want to avoid wordlist vulnerabilities, try this:

      Choose a lyric from a favorite song. Concatenate the first letter of each word in the lyric. Example:

      “Rock the Casbah Sharif don't like it”

      Becomes:

      rtcsdli

      Add capitalization or numbers/special characters according to your own pref. For example, maybe your decide to alternate lower and upper case and always end with a bang:

      rTcSdLi!

      Although you have to use the same capitalization rules for all passwords if you have any hope of remembering them.

      5 replies →