• Mika@piefed.ca
    link
    fedilink
    English
    arrow-up
    27
    ·
    1 month ago

    Greatly decreases your chances to enter it from different devices

  • 4am@lemmy.zip
    link
    fedilink
    arrow-up
    24
    ·
    1 month ago

    Use a password manager. Use the longest possible password the site will allow. Create a passkey and store it in the password manager if the site supports passkeys. Enable 2FA.

    It’s not about which characters you use, it’s about how long of a password you use. “correct horse battery staple” and all that.

    • Captain_Faraday@programming.dev
      link
      fedilink
      English
      arrow-up
      1
      ·
      1 month ago

      Second the PWM, but use 2FA or passkeys with a set of duplicate Yubikeys instead. Even with just 2FA TOTP codes, they are stored on the physical key. I have 4 of them in different places all duplicated. I sleep soundly at night lol

  • SayCyberOnceMore@feddit.uk
    link
    fedilink
    English
    arrow-up
    10
    ·
    1 month ago

    Accounts are rarely brute forced these days.

    It’s almost always a leaked, unsalted hash table.

    Ñōt göñńå hêlp mùçh

    • Björn@swg-empire.de
      link
      fedilink
      arrow-up
      1
      ·
      1 month ago

      That’s all fine and dandy until your app decides to default to ISO-8859-1.

      Happened at work. Customers could log in via web or use an email client. On the website we used UTF-8. But depending on operating system settings the email client would use UTF-8 or windows-1252 or iso-8859-15 or for our international customers some even more obscure (to us) ones.

      • harc@szmer.info
        link
        fedilink
        English
        arrow-up
        3
        ·
        1 month ago

        As a native of language that falls into two different windows charesets, the iso and utf I support death penalty for anyone still not using utf8 for everything and everywhere.

  • endless_nameless@lemmy.world
    link
    fedilink
    arrow-up
    6
    ·
    1 month ago

    It would marginally decrease the chance of your password being brute forced, which is likely the last way your password would ever get hacked, and most services have rate limiting to make this impossible or overwhelmingly unlikely anyway. So I’m gonna say no, not even slightly.

  • daannii@lemmy.world
    link
    fedilink
    English
    arrow-up
    6
    ·
    edit-2
    1 month ago

    The correct spelling of my name has an accent letter., its been working pretty effectively for keeping people from finding me on social media.

    My mom gave me this spelling cause it was “French” and fancy.

    No I’m not French and have no evidence than anyone in my family has French ancestry.

    Anywho. Yes. Accents are a great way to hide yourself on social media as well as add an extra layer to password security

    I also have my social media location as another country.

  • Randomgal@lemmy.ca
    link
    fedilink
    arrow-up
    3
    ·
    1 month ago

    No. No human is trying trillions of combination to brute force an attack. A machine does it, the machine will try all symbols and lettera.

    • furry toaster@lemmy.blahaj.zone
      link
      fedilink
      English
      arrow-up
      9
      arrow-down
      2
      ·
      1 month ago

      any brute force attack will use a dictonary based on know passwords and the usage frequency, if people are unlikely to use “accented letters” in their passwords it increase the time taken to bruteforce

      • Barbarian@sh.itjust.works
        link
        fedilink
        arrow-up
        6
        arrow-down
        1
        ·
        edit-2
        1 month ago

        Dunno why people are down voting you. Password lists have been around since forever, and anybody trying to brute force will start with one. Why cycle through “A”, “AA”, “AAA”, “AAAA”, etc first when you’re far more likely to score a hit faster with a list?

  • calcopiritus@lemmy.world
    link
    fedilink
    arrow-up
    2
    ·
    1 month ago

    Text: use an accented letter

    Image: shows a different, unique letter.

    As a Spaniard I feel this is rage bait. Like calling Q an accented O.

  • daannii@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 month ago

    Fyi. I keep all my user names and passwords in an address book. A physical one.

    In my house. That is locked. In a drawer. Not sitting on the computer or near it.

    Someone would literally have to break in physically, find the address book, and then flip through it to even realize what it was.

    I also have codes for some user accounts. So instead of writing them out I give myself a hint as to which one I used. I generally use a variation of 3 ones. With different slight changes.

    For my bank account access and the email account associated with it I only have hints. Not an actual user or email. So it can’t be bypassed with a password reset.

    These are both unique though and neither are the same as each other nor anything similar to all the other user name variants I use for other accounts.

  • javasux@lemmy.world
    link
    fedilink
    English
    arrow-up
    1
    ·
    1 month ago

    Well, you also won’t be able to log in from any computer with a US keyboard layout, so…