KID YOU NOT

A New York sixth-grader is selling really strong passwords for $2 each

In a world where anyone, government agencies and adulterers alike, can get hacked, a really, really strong password is invaluable. That’s why a 11-year-old from New York is selling cryptographically secure passwords for just $2 a pop.

Earlier this month, according to the blog Ars Technica, sixth-grader Mira Modi started crafting unique passwords by hand and selling them to people online. You can count on her password creations to be stronger than anything you would normally come up with, because she uses a method called “diceware.” Created by Arnold G. Reinhold in the ’90s, diceware is a tried-and-true method of designing a password that’s tough for a computer to crack—but dead simple for a human to memorize. (The problem with our passwords is that they are typically the opposite: relatively easy for a computer to guess, but end up becoming difficult for users to memorize.)

For how technologically innovative it is, diceware works in a relatively lo-fi way. You start by rolling a six-sided die five times to generate a string of numbers, which you then match to a numbered list of short and simple English words (16655 = clause, 16656 = claw, and so on). This is done a few times to create a random string of words, or a passphrase. The longer the passphrase, the higher its “entropy” or randomness, and the stronger it is, because it’s harder for a computer to guess. A five-word diceware passphrase looks like this: alger gene curry blonde puck horse. (Reinhold recommends using at least six words, to thwart modern-day computers.)

Modi writes every password by hand and then sends it to customers through a mail. Worried that’s not secure? Modi reminds customers that the government cannot open letters sent through the US Postal Mail without a search warrant. (Smart girl.) And what about Modi stealing your password and using it for her own gain? On her website, she recommends switching up the capitalization and adding symbols. Plus, she told Ars Technica, “In reality, I won’t be able to remember them all.”

Update, Sept. 26: Modi has received over 250 orders so far, her mother Julia Angwin told Quartz. Angwin is a senior reporter at ProPublica, where she writes on internet privacy, and author of the book Dragnet Nation: A Quest for Privacy, Security, and Freedom in a World of Relentless Surveillance. “I’m so proud of Mira’s entrepreneurship,” Angwin said. “And it’s worth noting that her success also shatters two myths about privacy—that people won’t pay for it, and that kids don’t care about it.”

home our picks popular latest obsessions search