Come up with your passphrase
Hurray!
Welcome, and congratulations on embarking upon the Twelve Days of Cryptmas. Each day consists of a short “Theory” section followed by some “Homework”. On our first day together, we’ll use dice to generate a secure passphrase.
Theory
From Freedom of the Press’s “Encryption Works”:
The first meaningful action you can take towards ensuring your digital security is to protect your computer and online accounts with a strong password. This is the first—and most important—line of defense between you and anyone with physical access to your computer who wants to impersonate you or steal your data.
Traditionally, computer users were encouraged to create and choose a password and attach some numbers onto the end of it. This would lead to passwords such as Tr0ub4dor&3, to reference a popular XKCD comic.
…to invent a passphrase consisting of unconnected words such as “correct horse battery staple,” is good advice, but it’s surprisingly hard to come up with four or five words that are truly unconnected and to choose words at random.
And so, we use something that’s good at randomness: a die! We won’t break out our board games every time we create a new password[1], but today that’s exactly what we’re going to do.
Homework
Generate a secure “Diceware” passphrase by following these steps:
- Roll a die (physical dice are preferable to digital ones for this step).
- Write the number down.
- Repeat this until you have a five-digit number.
- Find it on this word list.
- Pick at least five more words using steps 1 to 4.
And there you have it; a brand new passphrase! Keep it in mind, we’ll be using it tomorrow.
By the end of Cryptmas, most of your passwords will exist in a password manager and you won’t need to worry about remembering them. Today we’re generating your “master password”, which you do want to remember. ↩︎