DEV Community

Discussion on: Fantastic Passwords and how to generate them

Collapse
 
ajnasz profile image
Lajos Koszti

The best password is what no one knows, not even yourself. Use a password manager and generate long passwords.

If you use a scheme then you weaken your passwords and giving a chance to break them.

I used to have a similar process to create my passwords.
I had issues with these passwords: some site doesn't allow the special character I used, some other site thinks that my password is too long and so on, there are many different ways where my scheme didn't work. So I needed to add exceptions, change the algorithm and after all it was hard to use my own scheme.

Now I only use randomly generated passwords, I adjust it's length and character set to the site if needed.

One more important thing is that with a scheme it's hard to change the password. For one domain you have one password or need to alter your scheme but often it's still won't work. You know there are different checks that my new password should not be similar to the previous.

But worth mentioning that it's still better than using the same password everywhere. It's not tied to birthday or pet name, but there are weaknesses too.