Letters
I’m sticking with random-character passwords
I use the KeePassXC password manager (https://keepassxc.org), which generates both random-character passwords and passphrase passwords. I’ve never used passphrases, so I tested the claim made by the National Cyber Security Centre (Issue 613, page 8) that three random words are safer than “complex” passwords.
I asked KeePass to generate a password containing 15 random characters, and it reported its strength as ‘Good’. It then created a three-word passphrase, using title case, and came up with ‘Exporter Squeezing Speech’, which is 25 characters including the two spaces. It judged this to be a ‘Poor’ password. I then generated a password with 25 random characters, and got an ‘Excellent’ result (see screenshot above right).
On the basis of
