Comment by huehehue

4 years ago

The bounty password looks like 2 names, a type of flower, and a two word object. That significantly reduces the search space. Though, it's likely at least one of those words are non-standard or wouldn't be found in any wordlist.

7 comments

huehehue

Reply
mprime1  4 years ago

All words appear in some wordlist.

This is the kind of password I use to protect my actual secrets. So if someone is able to crack it, I'd like to know. The bounty is for a 'realistic' use case.

  • TedDoesntTalk  4 years ago

    If you want to avoid wordlist vulnerabilities, try this:

    Choose a lyric from a favorite song. Concatenate the first letter of each word in the lyric. Example:

    “Rock the Casbah Sharif don't like it”

    Becomes:

    rtcsdli

    Add capitalization or numbers/special characters according to your own pref. For example, maybe your decide to alternate lower and upper case and always end with a bang:

    rTcSdLi!

    Although you have to use the same capitalization rules for all passwords if you have any hope of remembering them.