by Fergal » 15 Aug 2024, 05:34
mrki444 wrote:I would do background on server side. Somehow having everything on client side can be security risk if somebody catch algorithm.
Thanks for your feedback mrki444. The advantage of having the password generated client side is that the password provider does not have access to it and does not store it. The password provider also never knows if a password generated by the site is used or not. If you use NowPassword to create a password, we have no way of knowing what password you used. If you use a password generator where the password is generated server side, the owner of the password generator may have access to those passwords.
saoussen5765 wrote:Three Word Password is not secure password and never recommand to use it. Either use alphanumeric password or the special character because some sites only accept this or this. It is easier than lastpass.
Thanks saoussen5765, the longer and more complex a password is, the more secure it is and the more difficult it is to remember.
Using three random words is not as secure as a longer password made up of random alpha-numeric characters, but it is a good step towards security and it is much more secure than using shorter passwords based on a single word.
The UK Government's National Cyber Security Centre says "By using a password that’s made up of three random words, you’re creating a password that will be ‘strong enough’ to keep the criminals out, but easy enough for you to remember."
More here.
[quote="mrki444"]I would do background on server side. Somehow having everything on client side can be security risk if somebody catch algorithm.[/quote]
Thanks for your feedback mrki444. The advantage of having the password generated client side is that the password provider does not have access to it and does not store it. The password provider also never knows if a password generated by the site is used or not. If you use NowPassword to create a password, we have no way of knowing what password you used. If you use a password generator where the password is generated server side, the owner of the password generator may have access to those passwords.
[quote="saoussen5765"]Three Word Password is not secure password and never recommand to use it. Either use alphanumeric password or the special character because some sites only accept this or this. It is easier than lastpass.[/quote]
Thanks saoussen5765, the longer and more complex a password is, the more secure it is and the more difficult it is to remember.
Using three random words is not as secure as a longer password made up of random alpha-numeric characters, but it is a good step towards security and it is much more secure than using shorter passwords based on a single word.
The UK Government's National Cyber Security Centre says "By using a password that’s made up of three random words, you’re creating a password that will be ‘strong enough’ to keep the criminals out, but easy enough for you to remember." [url=https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/three-random-words]More here[/url].