Being difficult to pronounce for English-speakers doesn't make dictionary words secure!
Fortunately, the web page itself suggests as much, but it's worth reiterating. Don't use these amusing passwords, please!
Fortunately, the web page itself suggests as much, but it's worth reiterating. Don't use these amusing passwords, please!
>RoliedigHembryonauCarmeliaid6
Seems pretty consistent with XKCD's comic on passwords.
With 8 high-end GPUs, we see a Blowfish speed of about 100 kilohashes per second. [0]
We assume we're cracking bcrypt strength 10, so we divide this number by 64 (2^10 ÷ hashcat's 2^4), and get about 1500 bcrypt checks-per-second.
There are about 170,000 words in the OED, and we choose 4 at random to give us 170_000^4 = 8.3521 * 10^20.
We can divide by 1500, but that still seems like a lot of seconds. (like, 3.5 ages of the sun)
[0]: https://gist.github.com/epixoip/a83d38f412b4737e99bbef804a27...
(Assuming you're not referring to it literally being a well known password from a web comic.)
Can you expand on that?