Conversation

what do you mean my password cannot be longer than 30 characters? what is this, a password for babies?

3
0
0

@Dee dee’s preferred password: complete contents of /dev/urandom

3
0
0

@Johann150 @Dee My KeePassXC generator settings are set to 40 chars by default.

1
0
1

@alilly @Johann150 I usually set it to 32 or 64 characters (because those are nice, even numbers), but in this case they apparently mandate it to be less than 30, on top of being longer than 8, and also having one lowercase letter, and also having one uppercase letter, and also having one digit, and also having one other symbol, and i’m not sure how much entropy they’ve reduced it by in the end

1
0
0

@Dee I was told key based authentication is good, so I've been setting all my passwords to my ssh public key

1
0
1

@unlofl clearly you should set them to your private key, to be more secure

0
0
0

@Johann150 @Dee best practices is to allow passwords that are 64 characters in length, but there really isn’t a reason to ban way longer passwords than that

1
0
0

@Johann150 @Dee you can tell it’s entirely arbitrary because the size limit of the password isn’t 8 or 52 where certain password hashing algorithms (crypt and bcrypt respectively) will start behaving dangerously wrong because they are built like shit

0
1
1

@Dee @alilly since i have to use some strange systems at work, i’ve also wondered how i can tell the keepass generator to “make sure there’s at least one of these”. is that even an option?

1
0
0

@Johann150 @Dee KeePassXC has a checkbox for "pick characters from every group" in the password generator but I don't know about original KeePass.

1
0
0

@alilly @Dee i don’t see anything like that (Keepass 2.59)

and clicking on the help button in the password generator dialog, i got to this conclusion:

If you want to force that some characters appear in the generated passwords, you have to use the pattern-based generation.
https://keepass.info/help/base/pwgenerator.html

there are also some examples like what dee mentioned, e.g.

<i>Important! For all of the following examples you must enable the ‘Randomly permute characters of password’ option!</i>

Rule: Must consist of 10 alphanumeric characters, where at least 2 are upper-case letters and at least 2 are lower-case letters.
Pattern: uullA{6}
https://keepass.info/help/base/pwgenerator.html#rules

sounds a lot more complicated than having a checkbox like you described though

1
0
0

@Johann150 @alilly I guess the upside of this is that it may allow you to cover some ridiculous password requirements

personally, if I have to generate stuff like that, though, i’ll just keep retrying the generation until one password takes

1
0
0

@Dee @alilly i guess that works. what i did in the past is use the password generators preview and pick one that fits the criteria. though if i’m not paying attention that comes out to the same solution as yours neofox_blep

0
0
1

@Dee at work, we can't have passwords longer than 8 characters, they can't have symbols, are case insensitive on some systems, and have to be changed every 60 days. it's great :)

0
0
0