• caglararli@hotmail.com
  • 05386281520

How many bits of entropy should a password have to be reasonably future proof (10+ years)?

Çağlar Arlı      -    12 Views

How many bits of entropy should a password have to be reasonably future proof (10+ years)?

I’ve seen estimations that the NSA is capable of at least 1 trillion (PGP pass phrase) guesses per second, which would mean a password with 80 bits of entropy would take, on average, over 15,000 years to guess. However, this estimation was from 2015 and almost definitely outdated. How many bits of entropy is secure today, in late 2021? How many bits would be future proof for the next ten or so years?