{"id":2279,"date":"2021-01-29T17:00:00","date_gmt":"2021-01-29T16:00:00","guid":{"rendered":"https:\/\/www.nico-maas.de\/?p=2279"},"modified":"2021-01-29T15:17:10","modified_gmt":"2021-01-29T14:17:10","slug":"xkcdpass-secure-passwords-for-transport","status":"publish","type":"post","link":"https:\/\/www.nico-maas.de\/?p=2279","title":{"rendered":"xkcdpass - secure passwords for transport"},"content":{"rendered":"\n
Passwords are problematic. Always. Especially during COVID-19 - were you have to securely transport data via insecure means. What I want to say: Sending confidential data via email. Actually, thats quite easy: (7)-zip everything with AES256 using a long enough key - transfer the key via additional, more secure lines of communication (e.g. phone) and you are ok for the most part.<\/p>\n\n\n\n
However, spelling %-FoPN#~OeJQ0h9g3_JWrvnq9h^ip))srzg{\\vnj<\/code> via phone is \"a bit cumbersome\". Thats the moment you recall Randall Munroe's xkcd #936 Password strength:<\/p>\n\n\n\n<\/figure>\n\n\n\n
And with this basic idea, xkcdpass was born. It can generate passwords from multiple dictonary entries, seperated by some symbols and generate things like showcase surging swoosh bakeshop smoked duffel<\/code> - and you can also tweek the settings to change the amount of words used, length, delimters, etc.<\/p>\n\n\n\n
It is written in python and can be installed via a quick pip install xkcdpass<\/code> and then used with the command line paramter xkcdpass<\/code><\/p>\n\n\n\n
![\"\"\/](\"https:\/\/imgs.xkcd.com\/comics\/password_strength.png)
<\/figure>\n\n\n\n