Skip to content

Comment on Show HN: Secure Diceware Password Generator with zxcvbn entropy estimates

Comments

zxcvbn and Diceware don't mix.

Sure, you can run zxcvbn over a Diceware passphrase, but it's meaningless, since the whole premise of Diceware is that the attacker may know that you're using Diceware. It is designed with that conservative mindset.

If you don't care about that aspect, there are better ways to derive passphrases than Diceware.

Every Diceware word yields 12.9 bits of entropy, so your example passphrase yields 90 bits, not 117.

AboutSource Built by g1lg1l

Hackerly is an independent reader for Hacker News, built on the public HN API. Not affiliated with Y Combinator.