Finding the balance between strength and ease of recollection can be difficult. Luckily, there are several great techniques that we can utilize to help find that sweet spot. Before we discuss those, let’s review some basics of password strength:
Password Basics
Length – The majority of resources agree that your password should be at least 8 characters in length. Each site may have different limits on the length this allowed. In general, the longer the better.Makeup – There are 4 different classes of characters that you should incorporate. Integrating all 4 classes will minimize the risk of your accounts being compromised. They are:
- Lower Case Letters
- Upper Case Letters
- Numbers
- Symbols (Especially ones that aren’t shift-alternatives for numbers)
Common Mistakes To Avoid
In general, stay away from the categories below. If you must use them, be sure to combine them with the techniques discussed later.Avoid using basic personal information. This can include:
- Names of family members, close friends, or pets
- Birthdays, Anniversaries, Dates Of Birth
- Social Security Numbers, Pin Numbers, Account Numbers
- Current Or Previous Addresses, Phone Number
Avoid sequences. Ensure that you do not use ‘abcdefg’ or ’123456′. Also be weary of keyboard sequences, such as ‘qwerty’ or ‘asdf1234′ or even shapes like ‘rfvbnhyt’.
Avoid keeping default passwords. This is important because identity thieves can often find out how popular sites generate their random passwords (or at least the format). It’s essential to change these as quickly as possible.
Avoid complete words, especially common ones - The most basic password hacking software often checks databases of common dictionary words (even in foreign languages). No, spelling words backwards does not get around this, either.
How to Make A Strong Password
If you follow these tips, you will not only have a strong password but you’ll be known throughout the land as the one to go to when someone has a password in need of some bulking up.Use Leet Speak – (|_ 337 $!*3@|<)
This can simply be described as substituting a letter in a word for either numbers or symbols. Wikipedia has put together a fantastic table, which displays basic substitutes for each letter. Here are the basic letter to number scenarios as outlined by Wikipedia:
- 0 can be used for O (or D)
- 1 can be used for I (or L)
- 2 can be used for Z (or R and Ä)
- 3 can be used for E
- 4 can be used for A
- 5 can be used for S
- 6 can be used for G (or B)
- 7 can be used for T (or L)
- 8 can be used for B
- 9 can be used for P (or G and Q)
Creating an Acronym from a Phrase
“Baker” can be turned into “|3 @ !< 3 )2″
This is a common password technique that can really go a long way in helping you remember your password. It also does a great job at randomizing the sequence of letters. For Example:
Misspell Common Words
“I Love Rocky Road Ice Cream With Sprinkles” would morph into “ilrricws“
Most commonly you can use this technique to spell word phonetically, however any misspelling that you can remember will suffice. For example:
Homophones
“Elite” might just become “Leet” - or - “telephone” could be spelled “telefone”
Homophones are words that sound the same, but that are spelled differently. Not only do these make your password harder to guess, but they often can help you remember it, as well. For example:
Combining Words/Dates By Alternating Characters
“Bo Knows Football” could turn into “bownosefootball”
This strategy uses two or more words and dates and alternates them every other character. For example:
“jump & jive” could be “jjuimvpe” - or – “John2004″ would be “J2o0o0n4″
Putting It All Together!
For a real life example of how we can combine several techniques lets do a sample. Recently, I’ve began incorporating my goals into my passwords to help keep me on track. In addition, my wife and I have been planning to move to Australia for over a year now. Let’s start with:“Australia Is Gonna Be Totally Awesome” and then cut it down to “AustraliaIGBTA”Does your head hurt yet?
Next, lets misspell Australia by changing it to “AweStrYaIGBTA”
Finally, let’s hit that with some Leet… “@//3StrYa|G8T@“
Remember, you can simplify this process as much as you’d like. Even “@w3StrY@” would be an above average option. Use as many techniques as you can, while still feeling comfortable with the end result.
How Many Password Do You Need?
Obviously, the most optimal method is to have a unique password for each account. This would ensure that if one of your accounts became compromised you would not be at risk for even further damage. You can usually accomplish this by changing just one part of your initial “phrase”, if you utilize that technique.Everyone’s situation is different, however I would guess that you have at least a couple very important accounts. Chances are your e-mail, financial data, and online banking accounts all contain very sensitive information. At the minimum, these should all have unique passwords. I personally have developed less stringent passwords that I use for several social media websites and other non-sensitive accounts. Once again this comes down to comfort level and risk tolerance.
What are your password bulking tips?
Source: bargaineering.com
No comments:
Post a Comment