04-17-2013, 02:44 AM
(04-17-2013, 12:09 AM)quinndupont Wrote: If I have the math right (and damn, I probably don't), we're still looking at 10^27 years of cracking to exhaust the combinatoric space, right?Remember that unlike the passwords that 1Password saves for people, the Master Password has to be memorable and typable by humans. If one uses a diceware password phrase (as we recommend to 1Password users) then a three word pass phrase has a mean time to crack of 22 hours. A four word one has 19 years, five words is 150,000 years. After that it is millions of years.
In other words, this does change the kind of advice we have to give users. Please keep in eye on the AgileBits blog for more details.