Password Testing Sites. Am I being Paranoid?

[Michael63129]

For the password I use for the SDMB, it says 6 million years, yet it is actually relatively simple (somebody who knows me well could easily guess it). I also use the same password on other sites (although not everywhere). Also, the displayed time needed to crack it appears instantly as I enter it, so I doubt any information is actually being sent to the server, probably some JavaScript code; if you click on show details, it will show the number of characters and combinations (for letters only, there are 26 combinations per character, so the total is 26^n; including numbers makes it 36^n and so on), which is very easy to use to calculate the time needed, using the assumed speed.

[Nametag]

@SiXSwordS

I love that XKCD. There are several sites I visit that have password rules (must use one capital, between 6-8 letter must use one $%*? etc etc.).

I’ve compared some of my own passwords to the pws I have to come up with for their sites and mine are better.

I think I picked up my strategy here. Take some phrase or lyric or poem or whatever and use the first letter of each word. I usually add some numbers as well.

towamfnwdwslhcsihswagahwohcimnwacicfi995610

…gets a 66 quindecillion years rating from the linked site (I agree that that site is not necessarily a true test of password strength) and its just a common limerick with the number of syllables in each line appended. Easy to remember and you get a chuckle every time you enter it.

ETA: correctbatteryhorsestaple gets a quintillionyears.

Shoehornbutterhorse?