{"id":25998,"date":"2019-07-17T16:21:59","date_gmt":"2019-07-17T20:21:59","guid":{"rendered":"https:\/\/mjtsai.com\/blog\/?p=25998"},"modified":"2019-07-17T16:21:59","modified_gmt":"2019-07-17T20:21:59","slug":"lowercase-passwords","status":"publish","type":"post","link":"https:\/\/mjtsai.com\/blog\/2019\/07\/17\/lowercase-passwords\/","title":{"rendered":"Lowercase Passwords"},"content":{"rendered":"

Stuart Schechter<\/a>:<\/p>\n

\n

Your master password should be at least 12 lowercase characters or five words. Why use lowercase characters or words when you’ve probably been told (and coerced) to use uppercase characters and symbols in the past? If you have to enter the password on a device with on on-screen keyboard (like your phone’s), each uppercase letter or symbol may require extra key presses. You can get the same security, and save yourself a great deal of frustration, by making your all-lowercase password just 30% longer than if it were mixed case [9]. In other words, a randomly-generated 13-character lowercase password, which can be entered with 13 keystrokes, is as secure as a 10-character mixed password, which may require many more.<\/p>\n<\/blockquote>\n\n

Via Ricky Mondello<\/a>:<\/p>\n

\n

This plays into why the passwords that iCloud Keychain generates are dominated by lower-case letters; you might have to type them somewhere, sometime (but not remember). I explain this in the talk I gave at PasswordsCon 2018<\/a>.<\/p>\n<\/blockquote>\n\n

Previously:<\/p>\n