Words are the least secure way to generate a password of a given length because you are limiting your character set to 26, and character N gives you information about the character at position N+1
The most secure way to generate a password is to uniformly pick bytes from the entire character set using a suitable form of entropy
Edit: for the dozens of people still feeling the need to reply to me: RSA keys are fixed length, and you don't need to memorize them. Using a dictionary of words to create your own RSA key is intentionally kneecapping the security of the key.
We are talking about RSA though, so there is a fixed character length and it isn't meant to be remembered because your private key is stored on disk.
Yes the word method is better than a random character password when length is unbounded, but creating secure and memorable passwords is a bit of an oxymoron in today's date and age - if you are relying on remembering your passwords that likely means you are reusing at least some of them, which is arguably one of the worst things you can do.
we are talking about RSA keys - you don't memorize your RSA keys
if you rely on memorizing all your passwords, I assume that means you have ample password reuse, which is a million times worse than using a different less-secure password on every site
If you know the key is composed of English language words you can skip strings of letters like "ZRZP" and "TQK" and focus on sequences that actually occur in a dictionary
For every 1 person who knows how to use the windows command line, there are 50 people struggling because they didn't embed their video into their PowerPoint, or worse, their USB stick only contains a shortcut to their actual .ppt file
-----BEGIN PRIVATE KEY----- ( lemmy.world )
With GPL, you're programming Freedom. With MIT, you're programming for free. ( lemmy.world ) Englisch
Context:...
Windows updating just before thesis defense ( lemmy.world )