Welcome, Guest. Please login or register.

Author Topic: what I did for my pass phrase  (Read 124 times)

0 Members and 1 Guest are viewing this topic.

Offline sisseck

  • Fresh Nxter
  • *
  • Posts: 7
    • View Profile
what I did for my pass phrase
« on: December 08, 2013, 01:34:26 PM »
I have seen to many people with weak pass phrases get their funds stolen in the short period of time I have been here so I thought I would show you how I generated mine. I generated my own 256 sum from an easy to remember password. This way it will be close to impossible for someone to gain access to my account while still being easy to remember. I use linux to generate the sum but if you have windows you can install http://www.mingw.org/.

example:

echo password | shasum -a 256       (Hit enter and your hash will be returned)
6b3a55e0261b0304143f805a24924d0c1c44524821305f31d9277843b8a10f4e


Use the shasum as your password. Just replace "password" with what ever you want your seed to be.

If anyone else has some other easy ways to generate easy to remember secure pass phrases don't be afraid to post it.

Offline Evan

  • Fresh Nxter
  • *
  • Posts: 7
    • View Profile
Re: what I did for my pass phrase
« Reply #1 on: December 08, 2013, 02:49:36 PM »
What if someone try your password in the same way you generate it?

Offline fruitbat

  • Fresh Nxter
  • *
  • Posts: 7
    • View Profile
Re: what I did for my pass phrase
« Reply #2 on: December 08, 2013, 02:58:35 PM »
I went to random.org and generated an 64-character string:

https://www.random.org/strings/?num=4&len=16&digits=on&upperalpha=on&loweralpha=on&unique=on&format=html&rnd=new
13243913163420242590

Offline sisseck

  • Fresh Nxter
  • *
  • Posts: 7
    • View Profile
Re: what I did for my pass phrase
« Reply #3 on: December 08, 2013, 03:10:15 PM »
You should use something that only you would know as the seed. If someone can guess your seed and then guess what type of encryption you used they know way to much about you. This protects you from people just dictionary attacking every pass phrase. If you want you can run your hash through shasum as many times as you want or you can make small changes that can change the resulting hash by large amounts.

example:

echo password | shasum -a 256       
6b3a55e0261b0304143f805a24924d0c1c44524821305f31d9277843b8a10f4e

now just add -n echo

echo -n password | shasum -a 256
5e884898da28047151d0e56f8dc6292773603d0d6aabbdd62a11ef721d1542d8


You notice that the numbers are very different while I only changed one thing. It would be very hard for an attacker to know exactly how you set up your expression and you can also replace 256 with any number of encryption types.  This is what was easiest for me it might not be the best way.

Offline jefdiesel

  • Fresh Nxter
  • *
  • Posts: 2
    • View Profile
Re: what I did for my pass phrase
« Reply #4 on: December 10, 2013, 08:16:10 PM »
Is it possible to change my password?

I didn't go all out like this, and I want to change it now

Online pinarello

  • Fresh Nxter
  • *
  • Posts: 36
    • View Profile
Re: what I did for my pass phrase
« Reply #5 on: December 10, 2013, 08:22:17 PM »
No changing is not possible.

create a new account and transfer the money.

NXT: 12088507821025750338

Offline aan

  • Fresh Nxter
  • *
  • Posts: 19
    • View Profile
Re: what I did for my pass phrase
« Reply #6 on: December 10, 2013, 08:27:15 PM »
I have seen to many people with weak pass phrases get their funds stolen in the short period of time I have been here so I thought I would show you how I generated mine. I generated my own 256 sum from an easy to remember password. This way it will be close to impossible for someone to gain access to my account while still being easy to remember. I use linux to generate the sum but if you have windows you can install http://www.mingw.org/.

example:

echo password | shasum -a 256       (Hit enter and your hash will be returned)
6b3a55e0261b0304143f805a24924d0c1c44524821305f31d9277843b8a10f4e


Use the shasum as your password. Just replace "password" with what ever you want your seed to be.

If anyone else has some other easy ways to generate easy to remember secure pass phrases don't be afraid to post it.


Sorry to say your method is totally unsecure, please don't use it. If you are using Linux just use "shuf -n6 --random-source=/dev/random /usr/share/dict/american-english".