LankyBox01 wrote:

I don't think words are the best passwords, i think random characters are better
AbN*S??!-ooLosa0!

And also, that website isn't entirely random, each random algorithm is followed by a pattern (i. e. x+1-x/4 )
So if a hacker can break that website, (or just a nerd looking into the developer tools > sources), they can easily just guess every password combination.

It's better just to create your own randomised-character password, and never trust google password suggestions (unless they actually do get their randomness like cloudflare does)
Btw, cloudflare gets their randomness from pictures, literal lava lamp pictures.

Memorability is more important than security. And like I said, if there's ever a password leak, it doesn't matter if your password is “qwerty” or “GMGC11a4cMePQA93iama”.

fdreerf wrote:

if there's ever a password leak, it doesn't matter if your password is “qwerty” or “GMGC11a4cMePQA93iama”.

It only doesn't matter if Scratch stores their passwords in plain text, which I sincerely hope they don't. For more info, look up “password hashing”.

Flowermanvista wrote:

fdreerf wrote:

if there's ever a password leak, it doesn't matter if your password is “qwerty” or “GMGC11a4cMePQA93iama”.

It only doesn't matter if Scratch stores their passwords in plain text, which I sincerely hope they don't. For more info, look up “password hashing”.

Or they might have done the Adobe approach where “5ueS6PQiL3OvgSrtx7Wk” isn't any more secure than “Augustus29!”, assuming both are passwords which only appear once.

Flowermanvista wrote:

fdreerf wrote:

if there's ever a password leak, it doesn't matter if your password is “qwerty” or “GMGC11a4cMePQA93iama”.

It only doesn't matter if Scratch stores their passwords in plain text, which I sincerely hope they don't. For more info, look up “password hashing”.

I don't think they do as if you forget it you have to come up with a new one

pandacorn_owl wrote:

Flowermanvista wrote:

fdreerf wrote:

if there's ever a password leak, it doesn't matter if your password is “qwerty” or “GMGC11a4cMePQA93iama”.

It only doesn't matter if Scratch stores their passwords in plain text, which I sincerely hope they don't. For more info, look up “password hashing”.

I don't think they do as if you forget it you have to come up with a new one

That's security 101.
If you store passwords in plain text, what are you doing!?
If you have an account in a website that stores passwords like that, delete your account and run in case there's a databreach

ohoho i hope they hash passwords.

Of course, Scratch has holes, and it's possible to hack. But those holes are very small.
And there's already enough hacking in the news. I don't want another

kajㅤ wrote:

Subscribe to Eris Loris on YouTube (or ofc i hack ur device) | TRUMP 2020

Hacking is possible as no website is perfect but if you have a strong password the chances are pretty slim.

People could hack, but it’s wrong, and if u have a good password it won’t happen

A good thing to do is make a password something like this:
20GREENapples
@dventureAWAIT$
HAPPYt!ger
And stuff like that, using uppercase, lowercase, symbols, and numbers
Or you could go the long password tour and make your password
LOL-i-CANT-think-OF-a-GOOD-password-SO-i-CHOSE-this-ONE

Ok! I'm going to close as resolved!