▲ | FabHK 9 days ago | |
Agreed. But since every character gives you around 6 bits (26*2 letters + 10 numbers + some special characters ≈ 64 = 2^6), you'd need 256/6 ≈ 43 characters to exhaust the checked entropy, so up to that level it makes sense. If you use sentences instead of randomly generated characters, the entropy (in bits/character) is lower, so 100 characters might well make sense. | ||
▲ | afiori 9 days ago | parent | next [-] | |
Which is why sha+bcrypt is always better than just bcrypt | ||
▲ | 9 days ago | parent | prev [-] | |
[deleted] |