1.21.2010

On Passwords

If Your Password Is 123456, Just Make It HackMe

Excerpt:

Back at the dawn of the Web, the most popular account password was “12345.”

Today, it’s one digit longer but hardly safer: “123456.”


Comment: Our work password rules: At least one UPPER CASE. lower case OK. Must have at least one symbol like !@#$%^&*/. Must have alpha characters. And must have numeric as well. Must be changed every 60 days. Must not repeat. If you (or someone else) attempts to access a password protected site or workstation with an incorrect password (as I recollect twice but it may be three times), the site, server, workstation, etc is locked out for that user account.

2 comments:

  1. Simplest way to make a password safe is to form a phrase. The more cryptic it is does not make it any safer. What makes a PW safe is the length.
    Another thing for windows machines is to make your password longer than 15, I believe. Windows is unable to store passwords longer than 15. So there is not a chance of someone hacking your computer to steal your password. (Win 7 may have changed this, or maybe 64 bit OS also)

    ReplyDelete
  2. I'm rethinking the whole password thing because I haven't changed my online banking password in 14 years and it is not really that complex.

    It is not stupid like 123456 but it is not highly secure either

    ReplyDelete

Any anonymous comments with links will be rejected. Please do not comment off-topic