Good Passwords

How to pick a good password.

Because passwords are almost always the weakest link in any security system where they are used, the first step to better security is better password practice.

Things to avoid:

  • Don’t pick a dictionary word or a proper noun! Passwords are often easy to crack because most people pick a password that is a variation on a word in the dictionary. There are simply not that many words in human languages: it is trivial for a computer to try them all! This includes words where you have replaced some letters with numbers. For example, “L0V3” is just as easy to crack as “LOVE”.
  • Don’t use the same password for all your accounts. (insert here talk about password management tools). Also, it can be better to write down your passwords in a secure place rather than use the same one everywhere.
  • Don’t forget to change your password. You should change your password at least once a year.
  • Never tell anyone your password, especially if they ask for it.

How do you create a password that is strong and yet easy to remember? This can be really tough. The general trick is to start with multiple words you can easily remember, convert them into non-words, and add a few uppercase letters and symbols for good luck. Here are some ideas:

  • Although you should not use a single dictionary word, multiple words strung together can make a great password. For example, “9meLonrain”.
  • Consider mixing words from different languages. For example, “verde!tree”.
  • Create a non-sense acronym from a phrase that is easy for you to remember. For example, you could turn “The Revolution Will Not Be Televised” into “trwNbt” or even better “trwNbt!4”.