Hacker News Reader

I had a idea similar to this, where you would misspell one or two words randomly - and then generate a sentence below the password to help with remembering the built-in obfuscation.

Such as the Generate Password would be listed as:

> Correct Horce Battery Staple

> "Correct Horse-with-a-C Battery Staple"

View on HN

Why not just use "Correct Horse-with-a-C Battery Staple" as your password then?

Adding grammar will make it more predictable and less secure for the same word count.

It doesn't reduce the entropy any, so I don't see how it could be less secure (assuming you don't count "with a C" as the additional words, which obviously you wouldn't).

My thought was that it would add some protection against a dictionary attack.

"Horse-with-a-C" is a longer password, but could possibly be hit using an algorithm that expects "with-a-[letter]" to be generated as part of a password.

The randomized misspelling of a word-or-two was intended to break a dictionary attack.

What’s the point? Obfuscation doesn’t increase entropy.

The obfuscation is to break a dictionary attack.

Reply on news.ycombinator.com