Skip to main content

How to Choose a Good Password

I know that coming up with a good password can be difficult, so here are some guidelines to use.
 
 Choose a password that is at least six characters long. This should be long enough to discourage a brute-force attack. Currently, the maximum password length on many Unix systems is eight characters, but if you want to add a few more characters to make it easier to remember, go ahead. Just bear in mind that anything after the eighth character will be ignored (so ``abnormalbrain'' is the same as ``abnormal''). 
 
In general, a good password will have a mix of lower- and upper-case characters, numbers, and punctuation marks, and should be at least 6 characters long. Unfortunately, passwords like this are often hard to remember and result in people writing them down. Do not write your passwords down!
 
The license plate rule: take a phrase and try to squeeze it into eight characters, as if you wanted to put it on a vanity license plate.
 
Some people like to pick several small words, separated by punctuation marks of some kind.
 Put a punctuation mark in the middle of a word, e.g., ``vege%tarian''.
 Use some unusual way of contracting a word. You don't have to use an apostrophe.
 
 One of my favorite passwords was ``kEp*-h&y'': ``kEp'' --> ``keep'', ``*-'' --> ``laser'' (like those signs that you see outside of physics labs), and ``h&y'' --> ``handy''; ``Keep your laser handy!'' 
 
You can use control characters. Just bear in mind that a lot of them have special meanings. If you use ^D, ^H or ^U, for example, you might not be able to log in again. 
 
Think of an uncommon phrase, and take the first, second or last letter of each word. ``You can't always get what you want'' would yield ``ycagwyw''. Throw in a capital letter and a puntuation mark or a number or two, and you can end up with ``yCag5wyw''. 
 
Deliberately misspelling one or more words can make your password harder to crack.
 Use several of the techniques above. 
 
Something that no one but you would ever think of. The best password is one that is totally random to anyone else except you. It is difficult to tell you how to come up with these, but people are able to do it. Use your imagination!

Comments

Popular posts from this blog

Evaluate the Technical Considerations of Your Website

Evaluate the Technical Considerations of Your Website * Does the site load quickly – even (especially) for mobile users? * Are all links (internal and external) valid and active? * Are scripts free from errors? * Is the website free from server side errors? --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

Evaluate the Design of Your Website

Evaluate the Design of Your Website * Is the site's design aesthetically appealing? * Are the colors used harmoniously and logically related? * Are the color choices visually accessible? (For example high enough in contrast to assist the colorblind and visually impaired in reading the site appropriately) * Is the design audience appropriate?- The standard text size should be readable for visitors who don't know how to adjust their browsers. * Are the fonts easy to read on various screen resolutions? --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus

Evaluate the Legal Stuff/Re-Assurance/Legitimization of Your Website

Evaluate the Legal Stuff/Re-Assurance/Legitimization of Your Website * Did you include a Contact Us page with real address, phone number (toll-free for businesses) and contact form or email available, basically a clear and easy to use feedback/contact mechanism? * DMCA Notice up? Terms of Use page available where you specify what you do and why and what visitors have to agree on if they want to use your site? This is to protect yourself from complaints or worse regarding things that you cannot control properly, such as links to third-party websites or ads from automated systems such as Google AdSense, etc. * Privacy Policy up (especially if you collect data, email, names, and web analytics tracking cookies)? --- This email has been checked for viruses by Avast antivirus software. https://www.avast.com/antivirus