undefined | Better HN

0 pointsfluidcruft3y ago0 comments

How is 1Password's secret key more secure than using keepass's key file feature?

0 comments

Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key.

Anyways, it depends on the app you use. Some Keepass apps haven't even been audited for example, so security of those apps may be questionable.

manmal3y ago

> Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key.

How would you remember a password of 128bit of entropy?

dagw3y ago

9-10 words chosen at random from a list of 10k common words in you native language will get you to 128 bits. Sure not trivial to memorise, but far from impossible.

1 more reply

DavideNL3y ago

Here's a 142bits entropy password: CorrectHorseBatteryStaple

Also see: https://xkcd.com/936/

1 more reply

manmal3y ago

That depends where you store that file. Is there a way to store this securely in a mobile device for use on the go?

j / k navigate · click thread line to collapse

0 comments

DavideNL3y ago

Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key.

Anyways, it depends on the app you use. Some Keepass apps haven't even been audited for example, so security of those apps may be questionable.

manmal3y ago

> Or, simply a password for your Keepass database with the same entropy as 1Passwords secret key.

How would you remember a password of 128bit of entropy?

dagw3y ago

9-10 words chosen at random from a list of 10k common words in you native language will get you to 128 bits. Sure not trivial to memorise, but far from impossible.

1 more reply

DavideNL3y ago

Here's a 142bits entropy password: CorrectHorseBatteryStaple

Also see: https://xkcd.com/936/

1 more reply

manmal3y ago

That depends where you store that file. Is there a way to store this securely in a mobile device for use on the go?

j / k navigate · click thread line to collapse