Passphrases and passwords

A passphrase is a kind of password, with different characteristics, particularly its length and use of multiple words and spaces. A passphrase can be both secure, and easy to remember, relative to an equally secure complex password. This post explores the particulars of passwords and passphrases.

Passwords

The following characteristics are typical of passwords:

• A password is a string of characters required for access to a system.
• Passwords usually contain a combination of special characters, letters, and numbers with variable lengths.
• Different sites and programs have variable requirements for passwords, including lengths, the inclusion of both numbers and letters, the use of upper and lowercase letters, and special symbols.
• A strong password offers better security. Passwords that are appropriately long and complex are harder to crack and offer more reliable protection for sensitive data.

Passphrases

The following characteristics are typical of passphrases:

• A passphrase is basically a more secure form of a password.
• A passphrase is typically longer and contains spaces.
• A passphrase can also contain symbols, and it does not need to be grammatically correct.
• It is often best if the words in the passphrase are completely random.
• Passphrases are easier to remember than passwords.
• Passphrases are almost impossible to guess.
• Passphrases can easily satisfy complex rules.
• Using unrelated words and adding characters and numbers makes passphrases more secure.

Usage scenarios for passwords and passphrases

The following list touches on use cases for passwords and passphrases:

• Both a password and a passphrase can be made secure.
• A strong, random passphrase is said to have more entropy and therefore be more secure than a regular password.
• Longer passwords (14 characters or more) can also have a high level of entropy, making them more difficult to crack through brute force, but they are also harder to remember.
• Most passcode rules and security standards allow for the use of passphrases instead of passwords.
• On the whole, using a passphrase is more secure and offers better peace of mind.
• In either case, the FBI recommends making passwords or passphrases as long as a system will allow for optimal security.

While both passwords and passphrases can be secure if used correctly, passphrases are often easier to remember. Ultimately, with the use of password managers, how easy a password or passphrase is to remember is not as crucial as it once was.

If you’re interested in our list of Open Source password managers, see Top 5 Open Source password managers.