RE: how long should a password be?

3 msg	GPG 1.4.9 false verification

how long should a password be?
\ Matt Kinni (5 May 2008)
. \ Noiano (5 May 2008)
. . \ Faramir (5 May 2008)
. . . \ Robert J. Hansen (5 May 2008)
. \ Sven Radde (5 May 2008)
. . \ Wolf Canis (5 May 2008)
. . \ David Shaw (5 May 2008)
. . \ Mark H. Wood (22 May 2008)
. \ Robert J. Hansen (5 May 2008)
. \ Wolf Canis (5 May 2008)
. . \ Bill Royds (5 May 2008)
. . . \ Werner Koch (5 May 2008)
. . . . \ Faramir (6 May 2008)
. . . . . \ Sven Radde (6 May 2008)
. . . . . . \ Faramir (6 May 2008)
. . . . . . . \ Peter Pentchev (10 May 2008)
. . . . . . . . \ Faramir (10 May 2008)
. . . . . . . . \ Bill Royds (10 May 2008)
. \ Wolf Canis (5 May 2008)
. \ vedaal (5 May 2008)
. \ Alan Olsen (6 May 2008)

1 msg	RFC4880 format without using keyrings?
6 msg	Question about GnuPG Smartcard
4 msg	filtering signed email with thunderbird
27 msg	playing with cryptography...
7 msg	my signature does not verify!
2 msg	can GPG help me with SPAM?
3 msg	GPG warning for integrity protection
3 msg	Version 4 / Version 3 keys
2 msg	Manual GnuPG 1.4.9 ...
6 msg	Revoking keys...
4 msg	Merging trusts...
1 msg	LDAP Basic Auth not working for key search, key...
3 msg	Open Pgp Smartcard ssh authentication Woes :(
3 msg	decrypting a message.
5 msg	dearmor in GPGME
3 msg	Web of Trust
1 msg	[Announce] Libgcrypt 1.4.1 released
3 msg	Vandalizing keyserver UID's

Subject:	RE: how long should a password be?
Group:	Gnupg-users
From:	Alan Olsen
Date:	6 May 2008

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

> Everyone says it should be as long as possible, but there comes a point
> where it's just impossible to remember anything longer than 20
> characters. What do you think?

Passwords should be as many characters as you can remember plus one.

Actually for long passphrases I use bizarre memorable sentences. You can add in extra punctuation if you are able to remember that. My usual passphrases are 50-60 characters, but since they are phrased in a way I can remember them, I don't forget them.

Examples would be:

"Never buy Fix-O-Dent from a veterinarian."
"Never buy corn oil from a podiatrist."
"Never buy baby oil from a pediatrician."
"Never buy tartar sauce from a dentist."

Or you can construct something longer, if you want. (Those are kind of short, but what comes to mind at the moment.)
-----BEGIN PGP SIGNATURE-----
Version: 9.5.3 (Build 5003)

wsBVAwUBSCDPpGqdmbpu7ejzAQqssgf+KvS/7O7VScJuNNvY7C6he1K26/hRrDEu
p1BnP+2wFQ7EHL6f/Bh137EuXCXK6Iok6psNHO5x1E5Y3P5YGpfgLQZ1vTd24cNS
fdohdyHXohdZn1eaoCgs8zKXFoUeoaLPvBlD59DWCSTrlWXMnVrCRKRuGz5Injgo
17jDDWTFOK+2O8JNOktoPKqfniYfCs5I1oagHVpOOv1YUHqTO/dWkXEwcbFfHj/B
RefDBMEOE+BUqpf1HmVUxw7hFskLv0SkylP+A5GVCgAAqh0biFj5LDqE5zzVzZSn
F6kLnRZlYeqcrsoxvlBCouDWP0e6R84+2CEkYamgaAWIxlI6JB5qJg==
=EEyT
-----END PGP SIGNATURE-----

_______________________________________________
Gnupg-users mailing list
Gnupg-users
http://lists.gnupg.org/mailman/listinfo/gnupg-users