How do you come up with passwords?

[Karoi]

Bitwarden, 64 characters, enabled all of the options, then I press three-four times and that is what the password is. I don't know my own passwords and I do this for everything and this is combination withh 2FA/MFA. Sometimes it's hell to login with all those security but it saved my ass so far.

 

[JuanMena]

Beep Boop!
Hi @tempBOT can you generate a password?
No? U can't?

 

[Lostbhoy]

Beep Boop!
Hi @tempBOT can you generate a password?
No? U can't?


View attachment 512155

I'm using those

 

[kijetesantakalu042]

Beep Boop!
Hi @tempBOT can you generate a password?
No? U can't?


View attachment 512155

In all seriousness, don't use GPT to generate passwords. There is a set of passwords that the model for whatever reason likes to generate more than others, meaning someone could ask chatgpt to generate a passcode a bunch of time and end up getting your passcode. Also the password is in control outside of your computer for a small amount of time, which makes it less secure.

 

[Veho]

https://www.correcthorsebatterystaple.net/index.html

 

[KleinesSinchen]

For local encryption passphrases: 8 words+ diceware created with actual dice improved by adding some numbers and special chars. Should be out of bruteforce range and is relatively easy to remember.

For online logins: Relying on randomness created by Keepass -- 30 chars. Even if the RNG isn't perfect this is probably good enough. Unique credentials for each site are very important. Despite there are shortcomings, activating TOTP where available is a good idea to create a second little barrier protecting your accounts.

There are tons of online password/passphrase generators. Most of them promise to just run locally in the browser and to be super-trustworthy.
I lack the expertise and the concentration to verify this... so I just stay away from things like this.

 

[SylverReZ]

I'm using those

Now everybody knows your password.

 

[Jayro]

I use a secure password generator, and make it generate something crazy long, and I'll grab a small 10-digit snippet out of it that looks easy to memorize, add symbols or numbers if needed, and memorize it. It'd take an eternity to bruteforce, since it's not using common words.

 

[Felicitybaldwinh]

I use a password manager for important logins and random phrases for low-stakes sites. Keeps things secure without stressing my memory.