Oct
Creating strong passwords you can remember

- Image by snowcrash via Flickr
When it comes to creating and using passwords, just about every security expert will tell you that strong, complex passwords are the safest.
A strong password is a password that meets the following guidelines:
- Be seven or fourteen characters long, due to the way in which encryption works. For obvious reasons, fourteen characters are preferable.
- Contain both uppercase and lowercase letters.
- Contain numbers.
- Contain symbols, such as ` ! ” ? $ ? % ^ & * ( ) _ – + = { [ } ] : ; @ ‘ ~ # | \ < , > . ? /
- Contain a symbol in the second, third, fourth, fifth or sixth position (due to the way in which encryption works).
- Not resemble any of your previous passwords.
- Not be your name, your friend’s or family member’s name, or your login.
- Not be a dictionary word or common name.(Source-StrongPasswordGenerator)
You can download applications or access online password generators that will help you compose a strong password. But what if you aren’t using your own computer, are alternating between Windows, Linux and Mac or can’t easily remember a password like “u65;+8)7VL83w)“? The site linked to above suggests the following mnemonic to help remember that password: “usher 6 5 ; + 8 ) 7 VIRGIN LAPTOP 8 3 weather )”. Sure, that looks like an easy thing to remember.
What I’d like to suggest is developing a fairly strong but easy to remember core password which gets customized for each site you need it for, making it unique and far stronger than the core password.
For this method you can use a core password that doesn’t meet the above criteria. As an example, I’m going to use a core password that consists of my age, initials and my birthdate. (Note, all of this information is easily obtainable and thus is not good for a password in itself. This is not a password I use anywhere.)
I want my core password to be 55JEC02031954. I can easily remember that. Since I still can’t believe I’m 55, I’m going to insert an exclamation point after my age, and a pointer to my birthdate. Now I have 55!JEC>02031954.
Now let’s say I want to register for http://jebersblog.com using my core password. Let’s add the custom characters that will be unique to this site. Using the initials suggested by the site name I come up with jb55!JEC>02031954. On the Lockergnome forum I would use lg55!JEC>02031954. For Friendfeed, ff55!JEC>02031954, and so on.
I only recommend using a strong but still breakable password like this for sites where you have no financial or personal information that someone else could profit from accessing. It should be sufficient for your WordPress blog, forum membership or sites like the Cutest Dog Competition, where you can register to vote for my beloved Cleo.
However, for sites like eBay, PayPal, your bank or any other site which requires much stronger protection of your information, I would suggest you bookmark Steve Gibson’s Ultra High Security Password Generator page.You’re going to get a password no one could possibly remember (for example: “>cr+q-kcKF9bBysCLbHdpVt(6\|r3fMV^~8%R.9^u<Mr(VPPH{1z;a4BhM`7@b[9) so you're going to have to record it somewhere. This is the weakest point of security when it comes to passwords. If you do have to write it down, keep it with you (not written on a Post-It note stuck to your monitor) and don't label it ("My bank password:...").
For even more security, do not let your laptop, or any mobile device, save your password for these sites, and change your password on secure sites frequently.
Related articles by Zemanta
- Two-factor authentication now available for Amazon Web Services (crunchgear.com)
- Three steps to help secure your site (owencutajar.com)
- Strong Passwords Not as Good as You Think (it.slashdot.org)
- The art of creating strong passwords (macworld.com)
- Got Problems With Wordpress Admin Password Reset? (mwd.com)
- The achilles heel of the Internet (blogs.securiteam.com)
- Keep a list of your important numbers with Password Keeper (bbgeeks.com)
- Do we really need passwords and PIN codes any more? (allaboutsymbian.com)



![Reblog this post [with Zemanta]](http://img.zemanta.com/reblog_e.png?x-id=75e5b4be-ff5e-4b31-8143-903ae61f26db)




