Feature request : passphrases

@jessyc: It's definitely something to consider, but given that our Wordlist has over 18k items, roughly 14 bits per word (so a four word pass phrase is 56 bits), 12 words is far beyond overkill: 168 bits of entropy, where we could get 170 using a character-based password with a length of 26. The primary benefit of word-based passwords is that they are easier to memorize and type...but I'd be hard-pressed to do either with 12 words from that list! So while I don't doubt we will increase the supported length in the future, you can get a much stronger password already today (character-based goes up to 64 — and save it in 1Password so you don't have to remember it). Cheers! :)

I would love to know the reasoning for their requiring 12 words like that.

Thanks for the feedback.

Rick

Oh yeah, I definitely agree it's hard to see the benefit of increasing the length of word-based passwords! The thing is, the app I'm using REQUIRES a 12 word passphrase. Not 11 or 13, exactly 12, with no option for character-based passwords.

@jessyc: Ah, that is interesting. Sorry about that. My thought was that you could optionally use words, but that they require a minimum of 12 in that case. It didn't occur to me that they wouldn't even allow you to use a character-based password. :unamused:

I'm sure it's an isolated case for now, and typing 2 extra words manually to get to 12 wasn't that complicated, but it might become more common?

I'd just generate two 6-word passwords and concatenate them. I will say that the downside to any manual password saving is that 1Password will view it as weaker than it would otherwise (since it is presumed to be human-generated)...but I doubt that will even be noticeable in this particular case. Anyway, definitely something we'll keep an eye on. I appreciate you bringing it up! :blush: