PAYPAL*NEXCONINC and PAYPAL*ACCLAIMGAMES == Fraud

[#1]

If they aren't very long, they can be brute forced.

[#2]

Quote from: Kelly

If they aren't very long, they can be brute forced.

I use the maximum length allowed by the site - if you drag and drop it it doesn't make any difference if it is 2 or 42 characters. I also use the full character set allowed.

[#3]

Quote from: PJ

There is a balance here between usability (ability to remember password) and security.

If I can remember it, it's not a good password!

[#4]

Something like

G!-b6vzxTqB=3Z;nt6$I,.mmVC%0JDU\IxZ7zNN:!.6S%OG5ZMo.Y#FE:oKXL-?L

is what I would call a password!
How long would a brute force attempt take to crack that.

[#5]

Create a `good` password, not a single dictionary word, but a memorably phrase.
Save it in a plain text, and create an md5sum, of that file.
Then you have a long complex password, which can be recreated when needed.
Chilly

[#6]

A good suggestion, but creating a md5 needs you to run software, so why not generate and keep the password in keepass or any of the many other similar programs?

[#7]

I am not keen on the idea that if someone cracks your master password, or you forget it, all your passwords are screwed.
Whereas md5sum will create a cryptic string from a known pass phrase.
(Note that I do not recommend a password)
Chilly

[#8]

Quote from: chillypenguin

I am not keen on the idea that if someone cracks your master password, or you forget it, all your passwords are screwed.

That requires them to physically get hold of your file holding the passwords in the first place!

[#9]

I never said that I was being rational.
Chilly

[#10]

LOL