Apple Passwords’ generated strong password format (rmondello.com)

Article summary

Apple's generated strong password format is designed to be easier to type on suboptimal keyboard layouts and more memorable for short-term use. The format uses a combination of lowercase characters, syllables, and consonant-vowel-consonant patterns to create 20-character passwords with 71 bits of entropy. The passwords are also filtered against a dictionary of offensive terms to prevent the generation of objectionable passwords. This format is intended to balance security with usability.

Main themes

• Password security
• Usability and memorability
• Entropy and randomness
• Keyboard layout considerations
• Password management

What commenters say

• The Apple password format's use of syllables and consonant-vowel-consonant patterns is a good design choice for balancing security and usability.
• The format's entropy is lower than a fully random password, but the trade-off is worth it for the increased memorability and typability.
• Using real words or longer passwords could be an alternative approach to generating strong passwords, but may not be as effective for all users.
• Password managers can mitigate the need for memorizable passwords, but a strong master password is still necessary for security.
• The ability to input passwords using a mobile app or other external method can reduce the need for easy-to-type passwords on devices like streaming devices or TVs.
• Some commenters argue that the Apple password format's limitations, such as the use of a specific character set and structure, could potentially introduce vulnerabilities.
• Others suggest that the benefits of the Apple password format, such as increased usability and security, outweigh the potential drawbacks.
• There is disagreement about the importance of memorability for passwords, with some arguing that it is not necessary with password managers, while others believe it is still a valuable feature.