I'm aware of what constitutes a decent password, but typing in 15-30 random characters each time I lock my computer screen is starting to get a bit taxing.
How secure does my user password really need to be and what are the threats to it? Does the same apply to a root-enabled user as a "regular" user when it comes to password security?
For context, my threat model doesn't need to account for real people breaking in and accessing my computer, the damage would be very contained.
Bonus question - what are the risks of having a weak password on a root user on a spare laptop on the same network as my main device that is used exclusively for web browsing? Thanks.
Home computer? I wouldn't even have a password. If someone has physical access to your PC there are ways for them to get what they want no matter how strong your password is. You just need it to be secure enough to prevent specific people you know have access from getting in. Family, friends, whatever. So basically the only risk is that you use a password that they know you use because you shared an account with them or something.
So don't even bother locking your front door then?
Use strong security, and enable encryption. Let's not make it easy for the rando who doesn't know much of anything.
Full disk encryption has been available to Windows since about 2010, with TrueCrypt/Veracrypt
statistically? yeah that's probably not a very big risk factor, and your house has windows if someone actually wants to break in.
Pretty much because cops might walk in if there's nothing physically stopping them but they'd have to do a bunch of paperwork if they smash my window to get in. In a world without cops I probably wouldn't lock my doors.
When and why is "the rando who doesn't know much of anything" accessing your home PC?