There are two ways to change simple wallet password, transfer to new address and private key import.
Private key import has the advantage that the address does not change.
Since the original is a simple wallet, there is no problem with importing.
However, if you change the password, Remote Account address and Secondary Address will change. This is because the password is related to the child account generation method of the BIP32 account.
With Simple Wallet it is virtually impossible to analyze the secret key using the current computer.
This is because the computer creates a secret key from a sufficiently long random number.
However, this is a condition that the virus or hacker has not been illegally invaded.
Brainwallet will take out the funds without entering the other’s computer.
The brain wallet’s secret key is generated from the password.
Even with over 40 letters, human characters can predict to some extent.
Safety can be secured if there are 40 random characters, but nothing is kept in keeping with any precaution.
That is why I do not use it.
And it is Simple Wallet that you do not need to worry about this at all.
Simple ollet passwords are effective when a virus or hacker is infiltrated into the PC.
The secret key is encrypted with the password and it is in the PC.
If we think on the premise that it is hacked, we also need to strengthen simple wallet passwords.
This is the area where convenience and safety are balanced. It has to be decided by individual judgment.
However, there is currently software that saves passwords safely.
It is also possible to save NEM’s Wallet password in that.
In this case, even if setting a very strong password, input effort will not change.
The latest NanoWallet has a function to measure the strength of the password.
You can calculate a measure of strength using this.
Enter the password to be set for Passphrase.
Since graph and analysis time will come out below, we will check this strength with reliance on this.
First is the red part of the graph Score.
Please be sure to make it 4/4 here. There is a fear that it can be broken by dictionary attack.
Even with random values, 11 characters are required at minimum to be 4/4.
Next, pay attention to the value of “Estimated Guess Times”.
Here, the analysis time of the password is shown from the number of calculations performed per second.
· 10/second
· 10,000/second
· 1,000,000,000/second
My MacBook Pro 2013 Late (Intel core i7 2.6 GHz) is about 33/second.
From here it will be my imagination.
If you optimize the code using GPU, it seems to be about 1000 times faster. Assume a little more 100,000/second.
Parallelization is very effective for this code, so if you are rich in individuals, you may be able to go up to 10 times this level. 100,000,000/second
1,000,000,000/second will definitely need a big data center.
The following example is a random character string using all alphabetic capital letters/lowercase letters/numbers/symbols.
In case of manual input Please read after recognizing that the risk to be analyzed increases.
Example 1
Xp;f[8rFt>{sJ8& It takes more than a century at random 15 characters 10K / sec. It seems that this is the realistic lowest line.
Xp;f[8rFt>{sJ8&zMY random 18 characters has become considerably safe.
Xp;f[8rFt>{sJ8&zMYQ3 random 20 characters very safe now.
Example 2:
Let’s also assume a word password. However, for such passwords NanoWallt did not give very accurate calculation results.
Below, we will explain with the value calculated based on entropy.
imbecile clop nose ordinary cortical balboa (6 words) It varies depending on the word list to be used, but it is as strong as 15 random characters of example 1 in 6 ~ 7 words.
homolog polis serving vagrom unduly divagate stripy heath parody doorman (10 words) This is safer than the random 20 characters in Example 1.
By the way, word passwords used in hardware wallet are used in 12, 18, 24 words. (default value is 24 words.)
Both Example 1 and Example 2 are calculated on condition that there is perfect randomness.
If human hands are added here, the strength of the password will definitely drop.
In addition, this information is for reference only. Depending on the evolution of the computer, it will become a weak password immediately.
Please make a good password.
Thank you.
