In all seriousness, is there any problem with using (cryptographically securely generated) UUIDs as passwords? They have plenty of entropy, right?
Reposted from
qntm
I just use the same UUID everywhere. I know it's not very secure practice but what are the chances
Comments
Although note that for online logins (i.e. not disk encryption) entropy doesn’t matter much.
Risks are 1) reuse 2) phishing 3) malware 4) trivial guesses (12345, password) and very distant 5) hash cracking.
High entropy is only needed for (5).
* Easy to create, just as any properly randomized string, regardless whether it is universally unique in time
You'd hope that in 2025.... 🤓
import uuid
uuid.uuid4()
... trim dashes, shorten if needed
^^ muscle memory
that said, if I have quick access to 1password I'll use their pw generator instead