Anyone here use Password Agent to generate passwords? A co-workers is extolling it to me.

[raccoon]

I prefer to make up my own.

[onehandle]

1. I use 1Password. It allows me to generate, save, and insert passwords across my devices.

However, in the last Mac OS X/iOS update, Apple built similar functionality into the system.

Slowly, I am abandoning 1Password. Nothing against it. It's a great product, but Apple has provided one more level of security, convenient to all users.

[Paulie]

2. I'm keeping 1Password for 2Reasons

The database can run via any web browser so I've put my master password in the physical safe deposit box and the database is linked on spouses computer (to Dropbox) with instructions in case I get abducted by aliens; she can get into accounts to pay the bills and change titles of accounts.

Other reason is I sync my 1Password database between all my computers (Mac and Win) and iOS and Android devices via Dropbox.

[Paulie]

3. Made up ones will always be weaker than random

Unless you're doing things like padding characters a couple of times in the middle on the password (not at the beginning or end) or not doing ch@r@c73r substitution which makes you less secure because you reduce the size of the alphabet. Mixing languages helps. Longer helps. And never use the same password at different sites.

I just have 1Password generate a 20+ character random and let it fill in the login/password fields. I don't even know a lot of my passwords.

[Recursion]

10. Random ones will always be weaker than long ones

Hell, a sentence made up of five dictionary words has about 32 bits of entropy....

[Paulie]

11. Agree longer is better but 5 words will likely be from common vernacular

Not the entire dictionary. Knowing the US they will be from a bible passage.

So use two different language dictionaries. Heh

[Recursion]

12. Five random dictionary words is about 50 bits of entropy

A five-word proper English sentence is about 32.

A bible verse has about 14 bits, not counting capitalization.

[MrScorpio]

4. I use my own. They're all a variation on a these of either...

Peace on Earth or Loss of Essence.

But don't tell anyone.

[mythology]

5. I use LastPass

So much so that I don't actually know many of my passwords. That way it really is random. Previously I had a few I used across multiple accounts which in relatively vulnerable.

Plus LastPass can be used with a browser so that if I am using another computer I can still get into my stuff as needed.

[orleans]

6. sheldon: yeah, 1-2-3-4 is not a secure password

http://bigbangtrans.wordpress.com/series-1-episode-16-the-peanut-reaction/

[Recursion]

7. An interesting result from information theory: we do passwords completely wrong

Write a script that pulls four random dictionary words. I've done it for a while now.

[Jesus Malverde]

8. Interesting graphic...nt

[Blue_Tires]

9. Mind = Blown