Blog
Articles about passwords, security, and why almost everything we were taught was wrong.
Diceware: how five dice pick a better password than you do
Ask someone for a random word and you won't get a random word: you'll get one of their words. Arnold Reinhold fixed that in 1995 with five dice and a list of 7,776 words. The beauty of it is that dice have no taste, no memory, and no idea what kind of day you're having.
What entropy bits are, and why we won't give you a percentage
"92% strong" doesn't mean anything: there is no 100 to reach. Bits do mean something very specific, and they always mean the same thing. Every bit you add doubles the work for whoever is trying to guess you, so 40 bits isn't twice as good as 20 — it's a million times more.