@Gregory I'm not sure such a thing exists.

I'm not sure what its purpose would be either.

@forest 256 bits is hard to memorize, but if I could have a customized virtual key board where I choose twenty photos from my vacation album then I wouldn't have to store the passwords in a vault on the hard disk.

There are far better ways to remember a good password, e.g. diceware.

Also, 256 bits is really not that hard to memorize.

Even a child can do it in a day if they use mnemonics or diceware.

@forest better? diceware takes 20 random words to meet 256 bits with an average passphrase length of 86 characters

@Gregory 20 words is not that much. Plus 11 words gives you 128 bits, which is plenty.

@forest still, personally I could memorize multiple photo sets as apposed to multiple sets of twenty random words, and if the only hold up between plenty of security and the current top end is the use of the right virtual keyboard...

@Gregory Photo sets aren't nearly enough. You'd need to pick over 20 unique photos out of a set of 7,000 to have any chance of reaching the keyspace you desire.

@forest you obviously haven't seen my vacation photos

:p

Generally the number of bits is the base 2 logarithm of the number of possible symbols (e.g. photos, words, characters) raised to the power of the number of random symbols in use.

So 128 symbols that can either be a 1 or a 0 is log2(2^128) = 128 bits.

And 10 words from a 7776-word dictionary is log2(7776^10), or approximately equal to 128.

I think it'll be lot harder for you to memorize photos than words.

@forest or 2^(256/20) ~ 7,132 symbols

oh, sorry the avg length of 86 was for my modified diceware word list, standard diceware would be an average of 104 chars (including 19 spaces) for 20 words

Characters don't matter for memorization, only words.

It's a lot easier to remember 20 random words than the equivalent amount of random characters.

correct, but they matter when you have to type it out many times a day

How often do you need to input it? You should use a password manager.

That way you only need to input a password once and all your other passwords are stored.

or if I had a "password imputer" for lack of a better term I could just as easily forgo the stored part as long as I can sufficiently dimensionalize the 7132 symbols into columns/rows/tabs/seasons/colors/...

There are stateless password managers which don't store anything.

They function by creating a hash of a website identifier concatenated with a master password.

I think that might be what I'm looking for, thnx