Nobody's gonna remember "pyf85ruGmmgæ&Oy_w48euaT0lt" so they'll either write it down, save it to their browser,or use a password manager, either of which makes it less secure.

On the other hand, something simple that doesn't necessarily make sense, say "AlmondsMakeFineGrenades" is difficult for both humans and machines to guess, but easy to remember.

Tl;Dr: an xkcd comic explaining it much better than I just did 😁

[–] bonn2@lemm.ee 13 points 1 month ago (1 children)

Using words in your password can undermine your security aswell, you need to include some other non-English stuff or you can be very vulnerable to dictionary attacks.

[–] Viking_Hippie@lemmy.world 11 points 1 month ago* (last edited 1 month ago)

Using words in your password can undermine your security aswell

Only if they're predictable words and/or in a predictable order. No dictionary attack is going to guess the exact word combination above or equivalent any faster than the preceding keyboard mashing.

Unnecessarily adding complications only makes the pass phrase harder to remember and thus less effective.

load more comments (15 replies)