Author

Topic: How to make a secure password (Read 721 times)

newbie
Activity: 32
Merit: 0
June 17, 2011, 01:54:34 PM
#3
I don't think it's absolutely necessary to include a bunch crazy characters in your password.

I'd suggest something easy to remember, yet hard to crack.

An example is, if you liked swiss cheese on a wednesday, and the 5th was your birthday.

5Swis5Chees5Wednesda^

That although looks relatively simple, is hard to crack unless the cracker knows your style of password creation. Using pure bruteforce, unless the guy knows you're gonna put a 5 in front of every word, capitalize every word, and put a ^ at the end, and remove the last letter of every word, it makes it very difficult to crack.

You can use your own variation, like, removing all vowels, putting '#2' between each word, etc.

Now I'm sure a lot of people are going "using your birthday number? bad idea! Capitalizing the first of every word? Bad idea! Now these would both be misconceptions because the cracker/hacker has to be able to 'predict' your pattern. An unsafe password would be:

June16  SecretPassword

Why? Because all a hacker would need to do is use a dictionary and capitalize every word. But when you take off a letter, it's no longer in the dictionary.

Why not just use a @C$*nc12m*r password? Because chances are you're gonna either:

1. Forget it. (Defeating the purpose.)

2. Write it down so you don't forget it (making it less secure).

If you can have a random password without either, then go for it Cheesy More power to you.

If you follow these steps, chances are it's not your password that's going to be cracked, but you're going to lose it some other way.
newbie
Activity: 84
Merit: 0
June 17, 2011, 01:50:21 PM
#2
also, don't use the same password on multiple sites
newbie
Activity: 18
Merit: 2
June 17, 2011, 09:38:41 AM
#1
I've seen several postings with people encountering issues with online accounts where they've had insecure passwords.

I've had over 10 years of experience with e-commerce development and security and I wanted to share some tips.


1. Make the password as long as possible. A website that's dealing with money and asking for less then 9 characters in your password has issues ( I'm looking at you Mt.Gox )
2. Combine the following; Upper and Lowercase characters, Numbers and Letters, Special characters (!,@,$,.,*... etc)
3. The more complex the better.


Examples of Good Passwords
!2#gHg6.&s
*(fs3IIIid3!F)

Examples of Bad Passwords
sdrawkcab
12121976
password

Hope this helps some of you
Jump to: