peppering the weak-ish passwords he comes up with and storing that in his decent password manager instead.
Most of the time people do that, it’s because they worry about not having the password manager and meeting to type alphabet soup. I’ve gotten through to a few people to use 5 words with a delimiter pepper. It’s still rather strong but they feel like they could type it if they had to.
Downside, if a site isn’t hashing, they won’t allow long passwords
Most of the time people do that, it’s because they worry about not having the password manager and meeting to type alphabet soup. I’ve gotten through to a few people to use 5 words with a delimiter pepper. It’s still rather strong but they feel like they could type it if they had to.
Downside, if a site isn’t hashing, they won’t allow long passwords