So basically the answer is, don’t even try. You can use full-bird cryptographic message signing, but thanks to a dedicated troll on /g/, PGP strings are banned from 4chan. That is, unless you use a bare trip, like me, in which case your tripcode is your name. They’re salted, and use a multiround hash, but they inherit the UX problems of random tripcodes. Secure tripcodes only solve one of these problems.(Binary numbers get twice as large every time you add a bit, so all things being equal, MD5 should be 4611686018427387904 times harder to crack than a tripcode.) SHA-1 is 160 bits, and it was phased out for secure use in 2006. MD5 is 128 bits long, and it was broken a decade ago. This is a tiny keyspace, much too small for any real security. “c1QfXUgcGY0” is 11 Base62 characters, which is a 66 bit long hash. If you using it to generate secure codes, then you are catastrophically mistaken as to the reason it exists. If it takes five minutes to generate a tripcode, then it won’t take much longer for an attacker to do the same. Tripcodes are trivially easy to reverse.

You can use tripcode explorer to generate a memorable tripcode, but then, There’s no obvious difference between alice!EDIctYjvCoH and alice!ED1ctYjvCoH, yet those are two completely different passwords. You get the same tripcode with alice#password as you do with bob#password or cat#password or just #password by itself. Were you using Merikens Tripcode Generator instead of Merikens Tripcode. You would think that “name#password” would hash those things together, but this isn’t actually true. s-so h-how would I go to crack a tripcode found on this board do I just. Some reasons tripcodes aren’t very secure: I’ve been putting it off since I don’t really know all that much about cryptography, which is one of the hardest fields of programming. So ipgd has had some problems with tripcode impersonation, which I guess means it’s a good time to write the post on tripcodes I’ve been meaning to do for, oh, eight months now.

How to crack a tripcode 4chan