Creating strong password. | Bitcointalksearch.org

XCANA

full member

Activity: 1470

Merit: 148

Quote from: Tipstar on September 29, 2020, 07:04:52 AM

Creating a strong password is an easier part, saving/remembering all those unique password for everything is harder.
That's why it's better to have mobile and 2FA verification wherever possible. And using different email address for different group of IDs are also amazingly safer.

They are sincerely safer but using the 2FA doesn't stop the hackers getting into your accounts(this has been proven by series of hacks in the industry). The only solution is for us to create a mixture of password that contains alphabets and numbers alongside characters, also, ensuring to use different password across the social medias to avert hackers getting into your privacy.

Tipstar

sr. member

Activity: 1932

Merit: 300

Vave.com - Crypto Casino

Creating a strong password is an easier part, saving/remembering all those unique password for everything is harder.
That's why it's better to have mobile and 2FA verification wherever possible. And using different email address for different group of IDs are also amazingly safer.

Kong Hey Pakboy

member

Activity: 1120

Merit: 68

OP has a good point about creating a strong or long password that is very hard to crack by hackers. But there are many great hackers nowadays that even you have a sentence as a password, they could easily hack your account instantly by sending and posting clicked bait links. That is why you should avoid clicking unsafe and unnecessary links because it could lead you to lose data and funds in your wallet or bank account.

CryptoManiaks

jr. member

Activity: 31

Merit: 1

Quote from: Asuspawer09 on September 27, 2020, 07:27:26 AM

I think my post here could give you a good idea about strong or bad passwords.

Understanding how password works a lot of people know how important that strong password is important for your account security but mostly a lot of experts still suggest changing your password every month for safety measures.

Quote from: Asuspawer09 on September 12, 2020, 12:15:31 PM

I was worried about this issue back in the day because if you just think about it websites could just use your password and login into your accounts if you use the same password on the other websites. And I think I've done the mistake in my early days because we know that it's easy to remember your password when you only have 1 password or 2 passwords Grin

. As an IT I understand that passwords in a website are actually encrypted so even the programmers or the websites should not be able to see your password at least.

It's better to have a strong password or another layer of protection when it comes to your Gmail because every website is just connected to your email, having an access to your email account meaning having access to all of your accounts on different websites most of the time.

But it's a different story when it comes to phishing websites or scammed websites because their goal is to get your information so I don't think they have encryption or anything.

Also, the construction of your password is important:

Source:
https://www.facebook.com/photo.php?fbid=10164381734490372&set=gm.2824409767782130&type=3&theater
https://howsecureismypassword.net/

You could also check how should your password here:
https://howsecureismypassword.net/
after what I said maybe you don't trust the website anymore, putting some password Grin

.

Great info! Cheers.

Also, websites like LastPass allows the safety distribution through team members which is always one of the biggest risks out there.

lovesmayfamilis

legendary

Activity: 2072

Merit: 4265

✿♥‿♥✿

Quote from: Bitcoinislife09 on September 27, 2020, 06:02:43 PM

Using the same password is not advisable since you might end up in some phishing websites and could use your information or password to access your other accounts. Also, you dont know every website if you could trust every one of the websites that you created an account. Employees could also mess it up or leak it on their own even if the company is a legitimate company. But when creating a strong password Usually an upper case letter plus many letters and numbers combine is enough already to make a strong password.

Here I agree with you. You should not trust any site, regardless of its reputation. Owners track all user activity, and not only for marketing purposes but also for the possible sale of data. What does the site know about its visitors?
https://computer.howstuffworks.com/internet/tips/information-about-me-online-.htm

And judging by the fact that they can track the entire history of the user, this can be very dangerous for the visitor himself.

Here you can see which sites and what information are collected about the user.
https://themarkup.org/blacklight

witcher_sense

legendary

Activity: 2450

Merit: 4415

🔐BitcoinMessage.Tools🔑

Quote from: superving on September 27, 2020, 05:46:19 PM

As for me my password is consist of 14 characters with upper letters, numbers and special characters, and its the same password i use on my social media accounts and exchange.

That is not a great idea to use the same passwords on different resources for a number of reasons. There are two types of brute force attacks in which hackers may use your laziness against you and get access to all the websites on which you put the same password. One of them is called "Reverse brute force attack" when hackers take your leaked password and start searching through many of usernames in order to find a interrelation. The second one is called "Credential stuffing" when hackers trying your login+password combination whereever it is possible in order to access your accounts. If you reused your credentials, you most probably will find yourself hacked.

Regarding the strong passwords containing upper, lower letters, special characters and numbers... It doesn't matter how strong password is if the input method you are using to insert a password is not safe. You can't memorize such a long password (you shouldn't), but be careful when using a keyboard to type it manually or when copypasting, your password may be easily intercepted.

Husna QA

legendary

Activity: 2296

Merit: 2892

#SWGT CERTIK Audited

Quote from: superving on September 27, 2020, 05:46:19 PM

As for me my password is consist of 14 characters with upper letters, numbers and special characters, and its the same password i use on my social media accounts and exchange.

I think it's risky to use the same password for multiple accounts, such as exchange accounts and social media accounts. Even though it consists of many characters, if the password has been successfully hacked by someone else (for example, through social media), of course, (somebody) will easily retrieve other accounts because the password is the same.

Bitcoinislife09

full member

Activity: 1028

Merit: 144

Diamond Hands 💎HODL

Quote from: superving on September 27, 2020, 05:46:19 PM

As for me my password is consist of 14 characters with upper letters, numbers and special characters, and its the same password i use on my social media accounts and exchange.

Using the same password is not advisable since you might end up in some phishing websites and could use your information or password to access your other accounts. Also, you dont know every website if you could trust every one of the websites that you created an account. Employees could also mess it up or leak it on their own even if the company is a legitimate company. But when creating a strong password Usually an upper case letter plus many letters and numbers combine is enough already to make a strong password.

superving

full member

Activity: 938

Merit: 101

As for me my password is consist of 14 characters with upper letters, numbers and special characters, and its the same password i use on my social media accounts and exchange.

AniviaBtc

sr. member

Activity: 1120

Merit: 272

First 100% Liquid Stablecoin Backed by Gold

Quote from: OgNasty on October 17, 2018, 10:26:15 AM

Quote from: TradeWaltz on October 17, 2018, 10:17:16 AM

I watched a lecture on that topic some time ago. It said that the main thing about password is in its length and the randomness of the used words. They said something like: sunnyflyuingpotatoesholiday is aslmost as hard to crack as the ones with symbols and numbers. Don't know if it's true, but the lecture was persuasive)

Adding some numbers, capitalization, and special characters is usually a good idea, see above graphic.

You need to maximize using numbers, letters, and symbols to have a much unique combination that is not that easy to remember by other people who wants to steal your account. By that, you can make a variety of combinations that will help you have a secured and safe password to become more comfortable in your account. I always remember my password and I never forgot them even if they are so complicated to access and type.

Xembin

jr. member

Activity: 84

Merit: 3

Creating strong password it will help your private details not to allow scammer to scam your coins.
It will also give you free of mind in your transaction because of the strong password you have created.
It will also make you popular in the platform not to be among the people their account has be hack in the forum.

Asuspawer09

sr. member

Activity: 1820

Merit: 436

I think my post here could give you a good idea about strong or bad passwords.

Understanding how password works a lot of people know how important that strong password is important for your account security but mostly a lot of experts still suggest changing your password every month for safety measures.

Quote from: Asuspawer09 on September 12, 2020, 12:15:31 PM

I was worried about this issue back in the day because if you just think about it websites could just use your password and login into your accounts if you use the same password on the other websites. And I think I've done the mistake in my early days because we know that it's easy to remember your password when you only have 1 password or 2 passwords Grin

. As an IT I understand that passwords in a website are actually encrypted so even the programmers or the websites should not be able to see your password at least.

It's better to have a strong password or another layer of protection when it comes to your Gmail because every website is just connected to your email, having an access to your email account meaning having access to all of your accounts on different websites most of the time.

But it's a different story when it comes to phishing websites or scammed websites because their goal is to get your information so I don't think they have encryption or anything.

Also, the construction of your password is important:

Source:
https://www.facebook.com/photo.php?fbid=10164381734490372&set=gm.2824409767782130&type=3&theater
https://howsecureismypassword.net/

You could also check how should your password here:
https://howsecureismypassword.net/
after what i said maybe you don't trust the website anymore, putting some password Grin

.

UserU

hero member

Activity: 2128

Merit: 532

FREE passive income eBook @ tinyurl.com/PIA10

Quote from: noormcs5 on September 27, 2020, 06:24:00 AM

This is not a right way of remembering your password. What if that paper is lost and you will lose all your passwords. Also if someone else get to access that piece of paper, he can easily get control of your accounts. Never store your passwords on any paper.

If the person didn't write the username too, then the chances are slimmer. But personally storing them on paper is somewhat more secure than on the PC or some online storage.

noormcs5

hero member

Activity: 2814

Merit: 618

Leading Crypto Sports Betting & Casino Platform

Quote from: nakamura12 on April 05, 2019, 05:22:14 PM

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

It's not a big problem to remember the passwords. I know that you want to ask about what if I forgot my password?, there is a simple solution to remember your passwords by writing it down on a piece of paper then keep it safe and if it happens that you forgot your password, all you have to do is check the password you have wrote in the piece of paper.

This is not a right way of remembering your password. What if that paper is lost and you will lose all your passwords. Also if someone else get to access that piece of paper, he can easily get control of your accounts. Never store your passwords on any paper.

lovesmayfamilis

legendary

Activity: 2072

Merit: 4265

✿♥‿♥✿

Quote from: erikoy on September 25, 2020, 06:54:55 AM

I would like to bump this thread to challenge users here on what exactly a strong password is all about. This is one of our seminar and I think it is still applicable of having a strong password as indicated.

Quote from: BitBustah on April 08, 2019, 09:02:56 AM

I use strong passwords on different websites, I do this without a password manager and I remember everything just fine. I find a long string of words similar to an electrum seed to be the easiest option for me. Just make sure you really use randomized words.

That is good. Remembering long or strong password is one of the most difficult task to do but it should be remember because that is one thing which is very important because it is all about accessing account.

Why remember passwords? Is it possible to remember passwords from the sites on which you registered? All the ways with notes on paper, or on a mobile phone, is it really reliable?
First, ask yourself the question, what and whom am I afraid of?
Want to keep your data safe? Use data encryption software. Save everything on flash media, let there be more than one. Use Vera crypt and similar programs, create containers with a double bottom.
And yes, such paranoia is needed only if you really have something to lose. With small amounts, the competent storage of flash media is enough.

superving

full member

Activity: 938

Merit: 101

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

Write down the password on a paper or you can save it on your notes in your phone, thats not a problem if your password is made of Cap and lower case letter it doesnt matter if its how long your password is, as long as you copied it

Cryptoababe

member

Activity: 898

Merit: 19

Do it For Better Humanity (Bitget trader)

Quote from: erikoy on October 17, 2018, 09:56:31 AM

Hello guys!

I just want to share something that was part and discussed in our 3 day training seminar about a certain topic on creating a good password. We could use this in cryptocurrency for we know that password is a vital part in creating accounts to store crypto in wallets, accounts for trading crypto and etc.

This may not apply to all because some users here are technically good and knows about this already. But, I still want to post this thread in the pursue of helping others for some average users that do not have that much knowledge on creating good and strong password.

I Hope that hackers could not easily invade our accounts especially with our precious BCT forum accounts and our digital wallets.

Take a look on this sample password and the time that the password could be crack!

Quote

Note: CTTO (Credit to the Owner of that SLIDE presentation)

Wow... I use the strongest kind of password though and I never use same password for any website to prevent getting pitched or compromised.. This thread is really good and helpful

samputin

sr. member

Activity: 1036

Merit: 294

Quote from: erikoy on September 25, 2020, 06:54:55 AM

<...>

Quote from: BitBustah on April 08, 2019, 09:02:56 AM

I use strong passwords on different websites, I do this without a password manager and I remember everything just fine. I find a long string of words similar to an electrum seed to be the easiest option for me. Just make sure you really use randomized words.

That is good. Remembering long or strong password is one of the most difficult task to do but it should be remember because that is one thing which is very important because it is all about accessing account.

Wow, I hope I'm like you that doesn't have trouble memorizing long string of passwords. If it's just something random, I tend to easily forget it. So what I did is use a Bible verse as a password. But of course with combination of big and small letters as well as special characters so that it's strong. Upon doing that, I wasn't that troubled by thinking and remembering what password to use.

erikoy

full member

Activity: 686

Merit: 125

I would like to bump this thread to challenge users here on what exactly a strong password is all about. This is one of our seminar and I think it is still applicable of having a strong password as indicated.

Quote from: BitBustah on April 08, 2019, 09:02:56 AM

I use strong passwords on different websites, I do this without a password manager and I remember everything just fine. I find a long string of words similar to an electrum seed to be the easiest option for me. Just make sure you really use randomized words.

That is good. Remembering long or strong password is one of the most difficult task to do but it should be remember because that is one thing which is very important because it is all about accessing account.

BitBustah

hero member

Activity: 1218

Merit: 534

Quote from: TryNinja on April 06, 2019, 06:25:33 PM

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

By using a trusted password manager. One strong password to hold many other strong passwords.

Repeating the same password is dumb, and using a weak password is also dumb. So that's (IMO) the best solution.

I use strong passwords on different websites, I do this without a password manager and I remember everything just fine. I find a long string of words similar to an electrum seed to be the easiest option for me. Just make sure you really use randomized words.

bob123

legendary

Activity: 1624

Merit: 2481

I often hear people about complexity vs. length when talking about password security.

There is a simple answer to this: length.

Lets look at it:

Complexity:
We got a charset of 26 (lower case letters) + 26 (upper case letters) + 10 (numbers) + 32 (special characters) = 94
Now with a 'normal' password length (8 chars) we got 6.095.689.385.410.816 possibilities.

Length:
If we look at lowercase letters only, we got a base of 26.
A password with a length of 12 has 95.428.956.661.682.176 different combination and already is about 15 times stronger than a complex password with 8 chars.

Increasing the exponent (charset^length) is way more efficient than increasing the base.

A lowercase password with the length of 12 is hardly arguable better memorizable than a 8 char password using lower+uppercase, numbers and special chars.

So, if you want to create a strong password, rather pass on complexity, and increase the length by a few more characters.

chris_90

newbie

Activity: 18

Merit: 0

Strong password is not enough to feel safe even if it is created with divers signs. It is good to look for exchanges which have high security standards, for example CoinDeal. You are informed about every login attempts on your email also confirmations are needed if you want to withdraw cryptocurrency.

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: TryNinja on April 06, 2019, 06:25:33 PM

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

By using a trusted password manager. One strong password to hold many other strong passwords.

Repeating the same password is dumb, and using a weak password is also dumb. So that's (IMO) the best solution.

in addition to this, there is always the good old method of using pen and paper to create a hard copy of your passwords. although this method is susceptible to physical theft but it still is a good way of securing your passwords if you keep that paper in a safe place that nobody can access.

Retina

member

Activity: 252

Merit: 59

Quote from: TryNinja on April 06, 2019, 06:25:33 PM

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

By using a trusted password manager. One strong password to hold many other strong passwords.

Repeating the same password is dumb, and using a weak password is also dumb. So that's (IMO) the best solution.

Yep, trusted password manager may help manages password, I think a strong password should be of 8-16 digits. Generally, the password should be like the picture below.

Quote

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

By using a trusted password manager. One strong password to hold many other strong passwords.

Repeating the same password is dumb, and using a weak password is also dumb. So that's (IMO) the best solution.

Hasmizara

jr. member

Activity: 227

Merit: 3

How to Create a Strong Password (and Remember It)
https://www.howtogeek.com/195430/how-to-create-a-strong-password-and-remember-it/

Thanasis

hero member

Activity: 1820

Merit: 515

★777Coin.com★ Fun BTC Casino

There are many random password generators available on internet which is much stronger than any characters were are thinking and if you pick 64 character password means it is impossible for anyone to crack it but please save your password copy as hardcopy saving on your system or in any clouds will make the condition worse.

Siren

sr. member

Activity: 826

Merit: 265

Quote from: TradeWaltz on October 17, 2018, 10:17:16 AM

I watched a lecture on that topic some time ago. It said that the main thing about password is in its length and the randomness of the used words. They said something like: sunnyflyuingpotatoesholiday is aslmost as hard to crack as the ones with symbols and numbers. Don't know if it's true, but the lecture was persuasive)

Giving random special characters and numbers together with letters for me is much safer than a long letters password.i wan hacked once in my online game thats why now i am more particular in my passwords creation for the assurance of not becoming a victim again

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

Its your stupidity if you dont come to remember a passwod that you are the one who created,ofcourse for the beginning you need to write if down so you wond forgot that soon

nakamura12

hero member

Activity: 2268

Merit: 669

Bitcoin Casino Est. 2013

Quote from: jerry0 on April 05, 2019, 12:20:58 PM

How do you even remember these passwords then if so many cap and lower case letters?

It's not a big problem to remember the passwords. I know that you want to ask about what if I forgot my password?, there is a simple solution to remember your passwords by writing it down on a piece of paper then keep it safe and if it happens that you forgot your password, all you have to do is check the password you have wrote in the piece of paper.

jerry0

full member

Activity: 1750

Merit: 186

How do you even remember these passwords then if so many cap and lower case letters?

madrogue

member

Activity: 98

Merit: 15

Creating a strong password is good to secure your account and keep it safe. But, there are have other ways, that hacker can steal your password. They can steal by use phising, keylogger, brute force and many more to steal your password.
I think you can add autenthication to add more secure your account.

erikoy

full member

Activity: 686

Merit: 125

I think this topic was useful here so I am just wanting to bump this thread as it has been given the chance to get merit.

Anyway, I just remember this and was able to apply it after the seminar. So far it is effective though others had given also their input which is also good. But, to those who are not really that techie and wish about knowing good password then you can start reading the post again and see the image I posted.

dvdrewritable

member

Activity: 280

Merit: 13

Thanks for your nice post with an informative photo. Yes, the password is one of the most serious issues for creating an account and it should be strong as no one can break it. But for making secure my wallet and information I generally like to use a password manager that's why I have been using LastPass and KeePass password manager.

nakamura12

hero member

Activity: 2268

Merit: 669

Bitcoin Casino Est. 2013

Quote from: shasan on November 04, 2018, 09:47:22 AM

To create strong password you can use https://passwordsgenerator.net/
From https://passwordsgenerator.net/ you can get random and strong password which no one can imagine and also it is easy to generate. You can create password by combine of Symbols, Numbers, Lowercase Characters, Uppercase Characters. Also while generating password you can exclude Similar Characters as well as Ambiguous Characters.
And even you can select how many characters the password will be!

Check the Op's provided image the password you stated is the same as the op's provided image that contains Uppercase, Lowercase, numbers and more. Using the password generator is also a good idea to choose a strong password but for me i'll use password generator as my guide on what to add when making a password. I prefer creating my own password that is based on internet or generator but I won't use passwords from passwords generators.

shasan

copper member

Activity: 2380

Merit: 1302

Playbet.io - Crypto Casino and Sportsbook

To create strong password you can use https://passwordsgenerator.net/
From https://passwordsgenerator.net/ you can get random and strong password which no one can imagine and also it is easy to generate. You can create password by combine of Symbols, Numbers, Lowercase Characters, Uppercase Characters. Also while generating password you can exclude Similar Characters as well as Ambiguous Characters.
And even you can select how many characters the password will be!

Ardavan2150

member

Activity: 98

Merit: 12

I think the best way to select a strong password is to let Google Chrome or Safari choose it for you.
They have "suggested password" option whenever you want to create an account.
They create a crazy complicated password and suggest it to you, and you just have to say yes.
Then they save it for you on your Gmail. You just have to make sure your Gmail account password is strong and turn on the extra security feature for it to make sure you don't loose it.

Areding

jr. member

Activity: 46

Merit: 1

The longer the password and the more randomness of letters and numbers in it, the harder it is to crack it, as fraudsters are looking for logically constructed passwords. Therefore, keep in mind)

mk4

legendary

Activity: 2870

Merit: 3873

Paldo.io 🤖

Quote from: ?? on ??

I think this is great, but if you're someone like me, creating it isn't the problem... remembering it is!

Password managers exist. It makes it a lot easier since you only need to memorize one complex password- your master password. Everything else: you other passwords, will be generated and stored on the password manager itself.

Lookup KeePass2. It blows my mind why people still don't use password managers.

Its debatable, that is according to this article: Overall Security of Password Managers Debatable, Cracking Firm Says. I'm old school anyhow, I would rather write down my password or memorize everything instead of using password manager.

Yes. It definitely depends. Using a password manager is pretty useless if your master password itself is weak, and it the password database you're using is in the cloud. If done well, using a password manager is definitely better in my opinion.

Writing down your password is definitely safer. No question about that. But would I memorize or write down every single password I use online? Knowing that I have more than 30 accounts online, hell no. Not to mention that I have to type in a 40-character password every time I have to login to a specific website? Nope. Not a single chance I'm doing that. Using the pen and paper method is pretty much only feasible if you have only a few accounts(probably 5 max). Imagine writing all 30 different 40-character passwords on paper. Thinking about it alone makes me nauseous; let alone memorizing every single one.

Another thing on the pen and paper method. If you have lots of accounts, you'd have to write every single password; the margin for error is pretty high in my opinion. Not to mention you'd have to make multiple copies if ever you lost your original copy. The percentage chance of you messing up/missing a single character of a single password is definitely not zero.

LoyceV

legendary

Activity: 3290

Merit: 16489

Thick-Skinned Gang Leader and Golden Feather 2021

Quote from: Edrahil67 on October 20, 2018, 07:57:23 AM

You can test your password on this website https://howsecureismypassword.net/

NEVER enter any of your password anywhere else than the original website where you use it! This is how you lose your security.

Quote

for exemple : ilovebitconsomuch

take 23 million years to crack ! Grin

Just like the examples in the OP, this isn't true! It's a very dumb method to estimate the cracking time for dictionary words as if it's random characters.
Scientific paper Speed Optimizations in Bitcoin Key Recovery Attacks gives some examples (page 6) of brain wallet passwords they cracked:

Quote from: https://eprint.iacr.org/2016/103.pdf

1. say hello to my little friend
2. to be or not to be
3. Walk Into This Room
4. party like it’s 1999
5. yohohoandabottleofrum
6. dudewheresmycar
7. dajiahao
8. hankou
9. {1summer2leo3phoebe
10. 0racle9i
11. andreas antonopoulos
12. Arnold Schwarzenegger
13. blablablablablablabla
14. for the longest time
15. captain spaulding

According to the website you showed, these passwords would be impossible to crack. In reality, a smart attacker can crack them.
To prevent this, you'll need to have a password with random characters, and for that, you'll need a password manager.

Edrahil67

copper member

Activity: 50

Merit: 0

You can test your password on this website https://howsecureismypassword.net/

It's show you how long is take for a computer to crack it

for exemple : ilovebitconsomuch

take 23 million years to crack ! Grin

erikoy

full member

Activity: 686

Merit: 125

Quote from: Korkorjkk on October 20, 2018, 05:01:23 AM

This is a great information, thanks for sharing. I think I want to add something small to it, that do not use one password for different accounts, and you can have a small notebook in which you can write the passwords in them.

Yes, we have all initiative and it is also a common sense when it comes to keeping safe of the password we use for an account. I have different way of keeping my password too. I wrote it in the word and save as a document and zip it in a folder. I have also to copy the document in a removable storage device for a back up of my password. Thus, I have to keep it discrete for it has a lot of password that includes private key for all of my digital wallets.

Quote from: cleygaux on October 18, 2018, 09:55:09 AM

Does it mean "LooksStrong" password can be cracked for 59 years? really? I used some really good password generator before and it can actually generate thousands of passwords in an hour but unfortunately Im not successful using it because I only test it in a very strong password characters with special characters and numbers.

No, not really it is just a reference for you on how to create a password and how many years it could be cracked. But, it doesn't mean that the password could only be cracked on 59 years for there could be chances that it will be cracked less than 59 years. My post only specified how difficult password could be cracked using special characters and uppercase letters password.

Korkorjkk

member

Activity: 546

Merit: 11

This is a great information, thanks for sharing. I think I want to add something small to it, that do not use one password for different accounts, and you can have a small notebook in which you can write the passwords in them.

VolkoB

member

Activity: 298

Merit: 11

Be happy =)

And so if we use a password with 12 characters (including case, numbers, and 1-2 special characters) such a password cannot be decoded, at least brute. There are many more intelligent ways to steal a password from a victim. Therefore, be safe and do not use the same password everywhere

guybrushthreepwood

legendary

Activity: 1232

Merit: 1195

Quote from: cleygaux on October 18, 2018, 09:55:09 AM

Does it mean "LooksStrong" password can be cracked for 59 years? really? I used some really good password generator before and it can actually generate thousands of passwords in an hour but unfortunately Im not successful using it because I only test it in a very strong password characters with special characters and numbers.

A password generator is not a cracking tool. I wouldn't rely on that image and using something as simple as LooksStrong as a password either and it's better to be safe than sorry. Passwords should be much stronger and longer than that but they don't need to be ridiculously so, especially if you run the risk of forgetting it which is another security risk arguably even a bigger one than hackers.

Quote from: pooya87 on October 19, 2018, 12:27:06 AM

Quote from: hugeblack on October 18, 2018, 02:27:06 AM

One of the most critical problems, in my opinion, is the difficulty of generating those words from the ordinary user where it is difficult for the user to remember passwords such as "fw5J||59TanCRys."

it will come down to the purpose of that password in my opinion. for example password of an Email account is not of the same importance as password for the encryption of a key printed on a paper wallet. the first one can simply be "myHard@MailPass69:)" but the second one should be harder since you would need to enter the first one multiple times and losing an Email is not important most of the times but you only want the second password once so it can be "s2ujkCb27$6hdb@7bn5+Dpc3*9dm"!

Nobody is going to be able to bruteforce a gmail password so that doesn't need to be ridiculously strong, but obviously don't use something simple. Email providers normally usually have 2fa options as well so make sure you utilize them for an extra layer.

pooya87

legendary

Activity: 3472

Merit: 10611

Quote from: hugeblack on October 18, 2018, 02:27:06 AM

One of the most critical problems, in my opinion, is the difficulty of generating those words from the ordinary user where it is difficult for the user to remember passwords such as "fw5J||59TanCRys."

it will come down to the purpose of that password in my opinion. for example password of an Email account is not of the same importance as password for the encryption of a key printed on a paper wallet. the first one can simply be "myHard@MailPass69:)" but the second one should be harder since you would need to enter the first one multiple times and losing an Email is not important most of the times but you only want the second password once so it can be "s2ujkCb27$6hdb@7bn5+Dpc3*9dm"!

there is also password managers that are safe to use, and some open source, that can handle generation and storage of strong passwords which you can use in a safe manner.

nakamura12

hero member

Activity: 2268

Merit: 669

Bitcoin Casino Est. 2013

Quote from: TryNinja on October 18, 2018, 10:51:33 AM

Damn. I thought the mainstream browsers (at least Chrome and Firefox) had fixed this issue already. The best solution at this point is bookmark each website and use an extension with an anti-phishing system like EAL or Metamask to make sure you’re in the right website.

Yes, it is the best solution. My firefox browser had lots of bookmarked websites wether old topics or new ones that is helpful even until now.

Quote from: ?? on ??

For me , a strong password is enough long with number, and special characters that hacker can not access to our account

Refer to Ognasty's suggestion or refer to op's infographic, however it's up to you on what password you would like for example:
1P4a3S5sW1o4r3D5* looks hard enough to where I got that sample password but it's a word Password and numbers 1 4 3 5 and special characters just like Ognasty's suggestion or the Op's infographic. I think you only read the title which is all about creating a strong password, good luck with that mate.

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: mk4 on October 18, 2018, 10:29:05 AM

At this point I wouldn't even trust looking at the address bar. It's a lot safer to type it in yourself(or via a browser bookmark). There was this Binance phishing site in the past with the url: biṇaṇce.com. Yes. Take a look at it a bit closer. biṇaṇce.com. There's a dot under both n's. That's tricky as hell.

Damn. I thought the mainstream browsers (at least Chrome and Firefox) had fixed this issue already. The best solution at this point is bookmark each website and use an extension with an anti-phishing system like EAL or Metamask to make sure you’re in the right website.

mk4

legendary

Activity: 2870

Merit: 3873

Paldo.io 🤖

Quote from: TryNinja on October 18, 2018, 09:36:06 AM

Quote from: erikoy on October 18, 2018, 09:08:36 AM

Take note that legit and secure website read like this (https:) and not secured website has only like read like this (http:) without letter s. This is the only thing I know about secured or legit website and not secured website. I guess there are many good members here that could explain further on your posts. You may create also a thread for this for the newbies. This is very important for the awareness of the new comers here. This will let them avoid scam and phishing activities.

This has nothing to do with a "legit" website. Anyone can get a free SSL certificate in 2 minutes (literally) and then have HTTPS in their website.

You shouldn't be looking at the text before the domain but at the domain itself. E.g: If you are on Binance, double check if it's binance.com and not binaence.com or binance.tk; Most phishing websites try to take advantage of the user who type the wrong domain or click at the unknown email with the fake website.

At this point I wouldn't even trust looking at the address bar. It's a lot safer to type it in yourself(or via a browser bookmark). There was this Binance phishing site in the past with the url: biṇaṇce.com. Yes. Take a look at it a bit closer. biṇaṇce.com. There's a dot under both n's. That's tricky as hell.

GDragon

full member

Activity: 658

Merit: 126

I think some of us aware of this thing today because as you see in every application, they required a strong password to pass the registration of accounts. In fact, there are only few application didn't care on what combination you will put.

cleygaux

sr. member

Activity: 656

Merit: 250

Does it mean "LooksStrong" password can be cracked for 59 years? really? I used some really good password generator before and it can actually generate thousands of passwords in an hour but unfortunately Im not successful using it because I only test it in a very strong password characters with special characters and numbers.

TryNinja

legendary

Activity: 2758

Merit: 6830

Quote from: erikoy on October 18, 2018, 09:08:36 AM

Take note that legit and secure website read like this (https:) and not secured website has only like read like this (http:) without letter s. This is the only thing I know about secured or legit website and not secured website. I guess there are many good members here that could explain further on your posts. You may create also a thread for this for the newbies. This is very important for the awareness of the new comers here. This will let them avoid scam and phishing activities.

This has nothing to do with a "legit" website. Anyone can get a free SSL certificate in 2 minutes (literally) and then have HTTPS in their website.

You shouldn't be looking at the text before the domain but at the domain itself. E.g: If you are on Binance, double check if it's binance.com and not binaence.com or binance.tk; Most phishing websites try to take advantage of the user who type the wrong domain or click at the unknown email with the fake website.

erikoy

full member

Activity: 686

Merit: 125

Quote from: Yadstiker on October 18, 2018, 08:18:09 AM

A great idea of yours sharing this kind of information for all to get aware and have an idea by choosing a good password but we should also consider it's still possible to get scammed when you open too many sites which has too many adds and maybe if you don't know it's a fishing site until you can't open your account.

Definitely but that is a different story, I agree that those hacking sites could phished one out just by letting you logging in a fake website or application that looks like real.

Take note that legit and secure website read like this (https:) and not secured website has only like read like this (http:) without letter s. This is the only thing I know about secured or legit website and not secured website. I guess there are many good members here that could explain further on your posts. You may create also a thread for this for the newbies. This is very important for the awareness of the new comers here. This will let them avoid scam and phishing activities.

Yadstiker

full member

Activity: 373

Merit: 100

A great idea of yours sharing this kind of information for all to get aware and have an idea by choosing a good password but we should also consider it's still possible to get scammed when you open too many sites which has too many adds and maybe if you don't know it's a fishing site until you can't open your account.

guybrushthreepwood

legendary

Activity: 1232

Merit: 1195

Quote from: erikoy on October 17, 2018, 09:56:31 AM

Take a look on this sample password and the time that the password could be crack!

Quote

Note: CTTO (Credit to the Owner of that Picture)

I don't think this is wholly accurate. The second one would take less than a day to crack according to https://howsecureismypassword.net/

"looks5strong" would be four years.

Regardless, sometimes it doesn't matter how strong your password is if your security is lax in other areas and that's where people often slip up. If you get a keylogger or some other virus that can grab your passwords from your browser then you're screwed either way. I've seen people boast online that their passwords are 30 random characters but yet they keep them in a notepad or in their email. Sometimes all attackers need is access to your email and then they can reset your accounts at will.

sud

sr. member

Activity: 826

Merit: 301

@gorkem

You mean screen keybaord? This is good idea, I'm doing it whenever I have to log in somewhere using unknown computer, so the potential keylogger won't hijack my password. Another thing is to always turn on 2 factor authenticator (application one, not SMS), it greatly reduce the risk of hacking your account.

gorkem

hero member

Activity: 868

Merit: 502

Good recommendation) but if Your computer is infected with a virus any password can be hacked.To minimize the risk it is worth paying attention to browser extensions.If possible, do not install anything.I also use a touch keyboard when entering passwords.

sud

sr. member

Activity: 826

Merit: 301

Very interesting topic. I think everyone using online services should take to heart, especially in crypto space when your money is at stake. I really started thinking about strong passwords as a safety measure, when I was making my first account on coinbase (which was the first crypto related service I used). So I made a pattern that helps me remember all my passwords on different sites without always checking - I'm using my core word and add another part which depends on the service name, of course everything includes lower and upper case letters, numbers and special characters. Same goes for passphrases to all my crypto wallets.

hugeblack

legendary

Activity: 2702

Merit: 4002

Quote from: erikoy on October 17, 2018, 09:56:31 AM

We could use this in cryptocurrency for we know that password is a vital part in creating accounts to store crypto in wallets, accounts for trading crypto and etc.

Strong passwords are a part of protecting your account but not only your account security. There are better ways to protect your account from using a unique password though it is the basis for protecting your account.

One of the most critical problems, in my opinion, is the difficulty of generating those words from the ordinary user where it is difficult for the user to remember passwords such as "fw5J||59TanCRys."
So the best solution is to save those words "notepad, paper," copy and paste it every time. Which will be dangerous if there are viruses on your computer.
One of the best sites that offer that service is[1]

[1] https://strongpasswordgenerator.com/ "offline"

pooya87

legendary

Activity: 3472

Merit: 10611

that picture is a little misleading in my opinion, which i believe is because you are posting it out of context and without that explanation of the author. these words are probably examples but only by looking at the picture you won't get that.
for example the second one "looksstrong" shouldn't take 10 days to crack since it is words that are found in a dictionary. of course the "s" in "looks" makes it a little harder but it is still pretty simple to crack. same with "LooksStrong" although capitalization makes it a lot safer but it is not yet "safe".
part of the misleading part that i mentioned is because it is using words, you may look at "LooksStrong" and think a 2 word password with capitalization is strong and takes 59 years to crack so you use a 2 word password with capitalization like "MyPassword" and it cracks in 3 seconds!

generally speaking you want all conditions together not just some: length + hi/lo chars + symbols + numbers
here is an interesting website: http://www.passwordmeter.com/

joniboini

legendary

Activity: 2170

Merit: 1789

A strong password has a big entropy. Try to use an entropy calculator to see the entropy of your password. Using something like https://apps.cygnius.net/passtest/ is good (use it offline).

S_Therapist

sr. member

Activity: 308

Merit: 280

Quote from: Harlot on October 17, 2018, 01:05:40 PM

Password manager softwares is the solution to this kinds of problem and I think not remembering all your passwords at all is not a problem anymore as there is a software doing it for you.

I don't need a password manager even.
The only password I remember is my email's password. I use a random password on random sites and most of the time I reset. I don't feel boring. Sometimes
, I need to reset my accounts 2 times a day, lol.

Quote from: Kezacky on October 17, 2018, 12:33:06 PM

~ abc12345def
~ 12345abcde

Those passowrds can be guessed easily. The best one may be- BtC4257$a, Almost impossible to crack. Use password with all combination as like as @OgNasty suggested.

Harlot

hero member

Activity: 1806

Merit: 672

The problem with uncrackable passwords is that you can't re-use them on other accounts and it leads to a lot of strong passwords in each different accounts which makes it impossible for you to remember all of them. Password manager softwares is the solution to this kinds of problem and I think not remembering all your passwords at all is not a problem anymore as there is a software doing it for you. Another thing to keep in mind is that even if you have a strong password you should regularly check your computer if it has any kind of malicious softwares as no matter how strong your passwords are if they can track it, your passwords would be useless.

boyptc

hero member

Activity: 3024

Merit: 680

★Bitvest.io★ Play Plinko or Invest!

Quote from: erikoy on October 17, 2018, 10:27:37 AM

Quote from: boyptc on October 17, 2018, 10:12:41 AM

Btw, is that seminar is only about making good password for 3 days?

Nope, it is just only a part or a topic of that 3 day training seminar.

Okay I thought its only about making passwords stronger.

Quote from: Kezacky on October 17, 2018, 12:33:06 PM

very helpful. I'm still new, does the overall password use sequential numbers and the alphabetical letters are still strong?
example:
~ abc12345def
~ 12345abcde

I don't think so.

See the example above and as much as possible you don't create a password like that.

Kezacky

member

Activity: 746

Merit: 10

https://axiomapay.com/

very helpful. I'm still new, does the overall password use sequential numbers and the alphabetical letters are still strong?
example:
~ abc12345def
~ 12345abcde

Dudeperfect

hero member

Activity: 1190

Merit: 534

Yes, generating and using a strong password containing multiple characters, special characters and digits are crucial to deal with the infinite amount of hacking attempts taking place every second. I would not recommend using the password generator for generating passwords but to come up with own pattern of the password with complex characters because it is not just easy to remember but also unique in its own sense.

erikoy

full member

Activity: 686

Merit: 125

Quote from: boyptc on October 17, 2018, 10:12:41 AM

Btw, is that seminar is only about making good password for 3 days?

Nope, it is just only a part or a topic of that 3 day training seminar.

Quote from: TradeWaltz on October 17, 2018, 10:17:16 AM

They said something like: sunnyflyuingpotatoesholiday is aslmost as hard to crack as the ones with symbols and numbers.

It is true. It is really hard to crack long passwords but you may have gone difficulties in accessing your account. So, having the numeric and special characters to include in the password is way better than creating long password.

OgNasty

donator

Activity: 4760

Merit: 4323

Leading Crypto Sports Betting & Casino Platform

Quote from: TradeWaltz on October 17, 2018, 10:17:16 AM

I watched a lecture on that topic some time ago. It said that the main thing about password is in its length and the randomness of the used words. They said something like: sunnyflyuingpotatoesholiday is aslmost as hard to crack as the ones with symbols and numbers. Don't know if it's true, but the lecture was persuasive)

Adding some numbers, capitalization, and special characters is usually a good idea, see above graphic.

TradeWaltz

newbie

Activity: 2

Merit: 0

I watched a lecture on that topic some time ago. It said that the main thing about password is in its length and the randomness of the used words. They said something like: sunnyflyuingpotatoesholiday is aslmost as hard to crack as the ones with symbols and numbers. Don't know if it's true, but the lecture was persuasive)

boyptc

hero member

Activity: 3024

Merit: 680

★Bitvest.io★ Play Plinko or Invest!

Wow that's an interesting photo just like the combination of letters and numbers.

Including special characters, symbols, caps and not would really make your password stronger. Btw, is that seminar is only about making good password for 3 days?

erikoy

full member

Activity: 686

Merit: 125

Hello guys!

I just want to share something that was part and discussed in our 3 day training seminar about a certain topic on creating a good password. We could use this in cryptocurrency for we know that password is a vital part in creating accounts to store crypto in wallets, accounts for trading crypto and etc.

This may not apply to all because some users here are technically good and knows about this already. But, I still want to post this thread in the pursue of helping others for some average users that do not have that much knowledge on creating good and strong password.

I Hope that hackers could not easily invade our accounts especially with our precious BCT forum accounts and our digital wallets.

Take a look on this sample password and the time that the password could be crack!

Quote

Note: CTTO (Credit to the Owner of that SLIDE presentation)

Topic: Creating strong password. (Read 1294 times)