David Geer Talks Tech
Wednesday, January 17, 2007
Why you should use strong passwords and usernames Courtesy of http://www.geercom.com (use this link to go home if you surfed here from my professional writing site).
Geer Communications. David Geer - your on-time technology writer!
Welcome!
The above article makes it clear why we should all use strong passwords. Regardless of layered security, attackers can get through your defenses using brute force attacks if you do not use strong passwords.
Here's my definition for strong passwords. The strongest passwords consist in a long string of many characters. These characters must in no way be based on or form any word in the given language or relate to or be based on any personally identifying information, including any significant numbers.
You should likewise create strong usernames (UIDs) to increase the security of your authentication credentials.
Resources:
There is sound data on the Web about strong passwords: http://www.google.com/search?hl=en&lr=&q=strong+passwords&btnG=Search. At the very least, that from Microsoft or presented by other major vendors or universities may be helpful.
There are automated strong password creation tools: http://www.google.com/search?hl=en&lr=&q=strong+password+generator&btnG=Search
As these are generated by someone else, you may want to alter the resulting password so that only you could possibly know it.
Many will certainly reply, "yes, but then you have to write the username and password down some where and others can see it on that little sticky note when they walk by".
True, if a sticky note is what you use to recall the password. If you can't find some other method of recall, keeping your sticky noted UID and PW in your purse or wallet will keep it from prying eyes when not in use, as is recommended by security experts:
http://www.schneier.com/blog/archives/2005/06/write_down_your.html.
Unfortunately, the UID/PW drudgery gets worse, as you should also change your UID/PW combo frequently: http://forums.cnet.com/5208-7810_102-0.html?forumID=77&threadID=159040&messageID=1764945
Best Regards,
David Geer - your on time technology writer!
Geer Communications
Geer Communications. David Geer - your on-time technology writer!
Welcome!
The above article makes it clear why we should all use strong passwords. Regardless of layered security, attackers can get through your defenses using brute force attacks if you do not use strong passwords.
Here's my definition for strong passwords. The strongest passwords consist in a long string of many characters. These characters must in no way be based on or form any word in the given language or relate to or be based on any personally identifying information, including any significant numbers.
You should likewise create strong usernames (UIDs) to increase the security of your authentication credentials.
Resources:
There is sound data on the Web about strong passwords: http://www.google.com/search?hl=en&lr=&q=strong+passwords&btnG=Search. At the very least, that from Microsoft or presented by other major vendors or universities may be helpful.
There are automated strong password creation tools: http://www.google.com/search?hl=en&lr=&q=strong+password+generator&btnG=Search
As these are generated by someone else, you may want to alter the resulting password so that only you could possibly know it.
Many will certainly reply, "yes, but then you have to write the username and password down some where and others can see it on that little sticky note when they walk by".
True, if a sticky note is what you use to recall the password. If you can't find some other method of recall, keeping your sticky noted UID and PW in your purse or wallet will keep it from prying eyes when not in use, as is recommended by security experts:
http://www.schneier.com/blog/archives/2005/06/write_down_your.html.
Unfortunately, the UID/PW drudgery gets worse, as you should also change your UID/PW combo frequently: http://forums.cnet.com/5208-7810_102-0.html?forumID=77&threadID=159040&messageID=1764945
Best Regards,
David Geer - your on time technology writer!
Geer Communications
