Hacker News Reader

Even memory is a tradeoff. Assuming excellent memory, even then people won't use 20 character passwords because they're too hard to type precisely. The ability to store/copy/paste passwords makes for stronger passwords because size and complexity just doesn't matter

View on HN

> people won't use 20 character passwords because they're too hard to type precisely.

I have friends who do this. They set huge passwords for "security", and then can't type them consistently, or forget them, and have to reset the password. Then they complain about their accounts getting locked.

I can't convince them that a shorter password is still secure, and will remove much of the aggravation.

How much shorter? Password security is related to the length of a password.

Reply on news.ycombinator.com