Don't worry, we will find a way around that stupidly draconian rule by making it... | Hacker News

Hacker Newsnew | past | comments | ask | show | jobs | submit

		AstralStorm on Dec 14, 2016 \| parent \| context \| favorite \| on: New NIST password guidelines: don't require charac... Don't worry, we will find a way around that stupidly draconian rule by making it not look like a word. For reference, common English dictionary words have about 24-bit entropy, a character has some 6 bits.

mrob on Dec 14, 2016 [–]

That sounds much too high. What common dictionary has 16 million words?

Nitramp on Dec 14, 2016 | [–]

And which user actively uses more than a couple of thousand words in something like a password? I'd expect actual entropy to be way less.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact