Google

Thursday, April 30, 2009

How To Generate a Strong Password

A password is your first and last line of defense in computer security. Typically people choose bad passwords because they are easy to remember. However, you wouldn't leave the door to your home unlocked because it is too much of a hassle to unlock it before you open the door, would you? A weak password is the same thing.

Using words that appear in a dictionary, in any language, make cracking your password that much easier. Adding numbers to dictionary words doesn't increase the password's strength at all if it is based on a dictionary word. Even with character replacements like capital letters and non-alphanumeric symbols, you're not getting a stronger password.

A true strong password should consist of 7 or more characters and be part of a "passphrase". A passphrase consists of a phrase that has special meaning to you, therefore making it easier to remember. For example:

Mickey Mouse for President. It would be awesome!

One simple approach to create a better password is to take the first letter of each word in your passphrase, giving you:

mmfpiwba

That looks seemingly random, and it's a fairly hard password to crack. But why not make it harder by using the punctuation from the sentence?

mmfp.iwba!

Now that is a much harder password to crack. Why stop there, though? Let's make it even stronger by capitalizing some letters and adding numbers.

MM4P.Iwba!

Now you have truly difficult password to crack; but is still fairly easy to remember. To make it even stronger, you can salt it with non-alphanumeric character replacements for greater difficulty. For example, replacing an "a" with a "@" leaving you with:

MM4P.Iwb@!

No comments:

Post a Comment