I start checking all websites to delete accounts for security purpose and it seems I used same password for many sites. I wonder if Apple's randomized security password is ok to use? I'm just worrying about finding password for each website cause it's randomized.
Got a tip for us?
Let us know
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.
Thoughts about Apple's randomized security password?
- Thread starter sunny5
- Start date
- Sort by reaction score
It's absolutely horrible practice to use the same password on more than one site. The password is randomized but the name and URL associated with it are not. I have no idea what most of my passwords are because I use long, randomized ones.
I highly recommend getting a password manager to properly secure all of your different accounts. Good password managers also offer excellent password generating options. In my opinion, the random passwords Apple provides are lacking.
Can see where @Apple_Robert is coming from, but imo, still better than what a user would pick.
On the con side, it's 20 characters long, numbers, upper/lower case, dashes, and in a set pattern of 6-6-6. 72 bits of entropy (per Apple's security white paper, which should be enough).
But, to crack this more easily, one would need to know that the password is in Apple format. And even then, you're looking at 1.83 X 10**32 possible combinations. Halve that to get an average number of guesses to hit the right combo, still a lot of attempts.
Have not looked in a while what state-of-the-art password cracking is like these days, but last time, custom rigs could do 1 billion guesses a second. At that rate, half of above is 9.1 X 10**22 seconds. If my math is right, that's 2.9 quadrillion years.
On the con side, it's 20 characters long, numbers, upper/lower case, dashes, and in a set pattern of 6-6-6. 72 bits of entropy (per Apple's security white paper, which should be enough).
But, to crack this more easily, one would need to know that the password is in Apple format. And even then, you're looking at 1.83 X 10**32 possible combinations. Halve that to get an average number of guesses to hit the right combo, still a lot of attempts.
Have not looked in a while what state-of-the-art password cracking is like these days, but last time, custom rigs could do 1 billion guesses a second. At that rate, half of above is 9.1 X 10**22 seconds. If my math is right, that's 2.9 quadrillion years.