char mins done; need to shuffle some error condition checks before

This commit is contained in:
2022-03-04 01:04:14 -05:00
parent 77d5271b5a
commit 1c0481824e
9 changed files with 215 additions and 16 deletions

View File

@@ -19,14 +19,26 @@ The author is not unique in this belief, either. For example:
If you decide that you still need this functionality, however, I recommend using something like [the Babble library](https://github.com/tjarratt/babble).
### Other Tips
## PWGen Tips
#### Password Hints
### Quicker Generation
PWGen is already really fast considering all the cryptographically-sound generation it does.
If you need to generate a very large number of passwords, however, there are some things you can do to ensure they generate more quickly:
* Ensure that you stick to pre-defined charsets
* This means no explicit chars defined and no excluded (disabled) chars defined; the number of those chars can affect generation time
* Use a fixed length (e.g. `-l 16 -L 16`)
## Other Tips
### Password Hints
Many services offer "password hints". These are useless at best and provide a vulnerability at worst.
If you are prompted for these and they are required (as they usually are), generate and use strong unique passwords for each question and store those "answers" in your password manager as well. This slightly weakens your account's access security (as you now have 3 -- or however many hint prompts are required -- that can be guessed instead of just 1) potentially, depending on how they implement the hint system, but there is absolutely no requirement that they be real answers. Doing so would lead to a more easily socially-engineered access of your account.
#### 2FA/MFA
### 2FA/MFA
If the service offers it, enable it. No arguments or excuses. It is the single most effective action you can take to protect your account's access and is well worth the slightly added complication of an additional auth method.