Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!


New on LowEndTalk? Please Register and read our Community Rules.

All new Registrations are manually reviewed and approved, so a short delay after registration may occur before your account becomes active.

Can Google Authenticator be hacked?

2»

Comments

  • solairesolaire Member
    edited March 2018

    Harzem said: Actually no. "All lowercase letters" are good enough.

    Depends on your definition of "good enough". I agree on your statement that a subset of 12 (lowercase) characters should be more than sufficient and that anything more can be overkill. As long as it's not something that is in a rainbow table, it should be sufficient, hence why I said 12 characters is fine as long as it's a mix of characters.

    However, you can't deny that the more characters used, the longer it takes to bruteforce as per the sample below.

    a through z => 26 characters. On a 12 character password, this is 95428956661682176 possibilities.

    Add A through Z and special characters => 93 characters. On a 12 character password, this is 418596297479370673535601 possibilities.

Sign In or Register to comment.