• Because cartoons are the best source of security advice...

    Bruce Schneier, on the other hand:

    This is why the oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick.

    use random unmemorable alphanumeric passwords (with symbols, if the site will allow them), and a password manager like Password Safe to create and store them.

  • Bruce Schneier, on the other hand:

    This is why the oft-cited XKCD scheme for generating passwords -- string together individual words like "correcthorsebatterystaple" -- is no longer good advice. The password crackers are on to this trick.

    It's not a trick that depends on the password crackers not being "onto it", it's an algorithm that might output any one of 244 possible strings, all of which are reasonably easy for a person to memorise. See the comments on Bruce's article for details.

About