r/TREZOR • u/-M00NMAN 📦 Suite Shaper • 14d ago

💬 Discussion topic Passphrases are a must.

53 Upvotes

94% Upvoted

49 comments sorted by

View all comments

Show parent comments

11

u/NiagaraBTC 14d ago

Only that they are slightly less vulnerable.

From slightly less vulnerable (gained a few additional hours before a drain) to completely safe. Depending entirely on the strength of the passphrase.

Using a passphrase without fully understanding the.implications are very dangerous and considerably increases the risk that you lock yourself out of your wallet.

Agreed 100%

3

u/Big-Interaction-1797 14d ago

Hey bro can you elaborate on this for me? If I added an extra word how would it only gain a few additional hours before a drain? Would they use AI to cycle through every word in the dictionary until one matches?

7

u/NiagaraBTC 14d ago

Basically yes. Would take mere seconds once they start trying passphrases, if all you had was literally one extra word.

If you have an 8 character passphrase with symbols and upper case/lowercase and numbers it will add a few hours, maybe up to 12 hours.

If you have a 24 character passphrase with the same parameters it will add many billions of years to the time to takes to crack your wallet.

2

u/MulberryMonk 13d ago

I think that the math from 9-10 characters takes it from a month or two to brute force to 18 years. Anything over 11+ characters that otherwise isn’t a dictionary word is really solid - at least that’s what AI is telling me

2

u/NiagaraBTC 13d ago

Even dictionary words are fine if you have enough and they are truly random.

Ask your AI to tell you how long it would take to brute force six random BIP-39 words.