Hacker News new | past | comments | ask | show | jobs | submit login

Just a heads up, since you seem to care about security: the strength is not in the properties (length, digits vs alphanumeric, that sort of thing) but in how you generated it. Use a secure random generator (e.g. `tr -dc 0-9 </dev/urandom | head -c 10`) and you can calculate exactly how strong it is. Think of something yourself or bash on the keyboard and all bets are off.

Also consider the attack vector: can an attacker just boot another OS and bypass the lock that way (so a super secure password won't fend off determined attackers anyway), or is it your disk encryption password? Is there a HSM that enforces a limited number of attempts (e.g. bank card)? Etc.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: