Quote:
Originally Posted by ratinox
Whereas I use this for everything. Which is why I have around 400 unique passwords between my work and personal accounts  . |
My passwords for low security accounts are unique, just not as complex as my high security account passwords. Do I really care if someone spends the hours needed to crack the password on my account for the local newspaper? Whereas my banking passwords are going to take a bit longer to crack. Yes, I do realize that yesterday's overkill is today's barely adequate and tomorrow's security breach waiting to happen. One site I use now allows a 1023 character password/passphrase but they have dropped all upper/lower/digits/special characters requirements though they do run your password through a quick dictionary words tool (rather unnecessary IMNSHO). The correcthorsebatterystaple password used in XKCD's example would not be accepted since it consists of a string of dictionary words.