←back to thread

Apple Passwords’ generated strong password format

(rmondello.com)
430 points tambourine_man | 3 comments | 18 Oct 24 11:12 UTC | HN request time: 0.488s | source
Show context
hk1337 ◴[18 Oct 24 14:01 UTC] No.41879560[source]▶
Nobody will probably like it but I just use pwgen to generate passwords now and store it in 1Password since Keychain removed the memorable password option.

    pwgen: aliased to pwgen --ambiguous --capitalize --numerals --symbols --secure
replies(2): >>41879645 #>>41879696 #
1. mr_mitm ◴[18 Oct 24 14:16 UTC] No.41879696[source]▶
This would be a more secure and much more ergonomic option:

    pwgen --ambiguous --no-capitalize --secure 12
Your command produces passwords like this:

    X3_>r"9'
I can't even copy it by double clicking on it.

Mine produces passwords like this:

    stq7nt4nvh3g
It even has more entropy by one or two orders of magnitude.
replies(2): >>41880151 #>>41880519 #
2. ◴[18 Oct 24 15:11 UTC] No.41880151[source]▶
3. hk1337 ◴[18 Oct 24 15:48 UTC] No.41880519[source]▶
I usually end up piping the result to a file so I can see it and edit if I need to and cat | pbcopy the file contents to the clipboard and save it in 1password. After that, 1password either fills in the password for me or copying it is just a button click.

The main issue I face is that some web sites will either not allow passwords longer than a certain length or will only allow some special characters.