Monday, October 12, 2009
How safe is your password?
This is an interesting article from a user that started out with a 6 character password years ago, and now is changing all passwords for all applications. I understand the idea of it being hard to memorize many different passwords. I had an instructor tell me that all users should use passwords that are at least 16 characters long, and they should type them in 10 or so times to remember them. It is the weakest link in the chain.
Subscribe to:
Post Comments (Atom)
The best method of password "generation" I've found is to take several words (a couple of longer words, a few shorter words) that I can easily remember and then string them together while swapping a couple letters for numbers or special characters. Something like:
ReplyDelete"Fluffy is my cat"
Becomes:
"Fluffy1smyc@t"
The approach should thwart dictionary attacks because of the multiple words and the resulting password isn't that hard to remember. It also results in a password that's long enough that a brute force attack isn't likely to succeed.
Cheers,
Dave