Security - Constructing strong passwords - Revision history

Philip Lacey at 17:04, 26 June 2018

2018-06-26T17:04:03Z

Philip Lacey at 17:55, 25 August 2015

2015-08-25T17:55:43Z

Philip Lacey at 17:55, 25 August 2015

2015-08-25T17:55:26Z

Philip Lacey at 17:54, 25 August 2015

2015-08-25T17:54:57Z

Philip Lacey: Created page with "= Constructing strong passwords = If someone learns your password, there are numerous things they can do to adversely affect your working and personal life. To prevent this..."

2015-08-25T17:53:34Z

Created page with "= Constructing strong passwords = If someone learns your password, there are numerous things they can do to adversely affect your working and personal life. To prevent this..."

New page

= Constructing strong passwords =

If someone learns your password, there are numerous things they can do to adversely affect your working and personal life. To prevent this, you can do the following

* Follow 6 steps to build a strong password
* Learn what makes strong passwords
* Avoid common password strategies that fail

= 6 steps to build a strong password =

The strongest passwords look like a random string of characters to attackers. But random strings of characters are hard to remember.

Make a random string of characters based on a sentence that is memorable to you but is difficult for others to guess.

# Think of a sentence that you will remember
Example: “My son Aiden is three years old.”

# Turn your sentence into a password
Use the first letter of each word of your memorable sentence to create a string, in this case: “msaityo”.

# Add complexity to your password or pass phrase
Mix uppercase and lowercase letters and numbers. Introduce intentional misspellings.
For example, in the sentence above, you might substitute the number 3 for the word “three”, so a password might be “MsAi3yo”.

# Substitute some special characters
Use symbols that look like letters, combine words, or replace letters with numbers to make the password complex.
Using these strategies, you might end up with the password “M$8ni3y0.”

# Test your new password with the Password Strength Checker
The Password Strength Checker evaluates your password’s strength as you type.

# Keep your password a secret
Treat your passwords with as much care as the information that they protect.

= Qualities of strong passwords =

== Length ==

Each character you add to your password increases the protection it provides.

8 or more characters are the minimum for a strong password; 14 characters or longer are ideal.

== Complexity ==

The greater variety of characters that you have in your password, the harder it is to guess.

An ideal password combines both length and different types of symbols.

Use the entire keyboard.

== Easy to remember, hard to guess ==

The easiest way to remember your passwords is to write them down.

It is OK to write passwords down, but keep them secret so they remain secure and effective.

= Password strategies to avoid =

To avoid weak, easy-to-guess passwords:

* Avoid sequences or repeated characters

“12345678,” “222222,” “abcdefg,” or adjacent letters on your keyboard do not make secure passwords.

* Avoid using only look-alike substitutions of numbers or symbols

Criminals will not be fooled by common look-alike replacements, such as to replace an ‘i’ with a ’1′ or an ‘a’ with ‘@’ as in “M1cr0$0ft” or “P@ssw0rd”.

These substitutions can be effective when combined with other measures, such as length, misspellings, or variations in case.

* Avoid your login name

Don’t use any part of your name, birthday, social security number, or similar information for your loved ones.

This type of information is one of the first things criminals will try, and they can find it easily online from social networking sites, online resumes, and other public sources of data.

* Avoid dictionary words in any language

Criminals use sophisticated tools that can rapidly guess passwords that are based on words in multiple dictionaries, including words spelled backwards, common misspellings, profanity, and substitutions.

* Avoid using only one password for all your accounts

If your password is compromised on any one of the computers or online systems that use it, you should consider all of your other information protected by that password compromised as well.

It is critical to use different passwords for different systems.

* Be careful with password recovery questions

Many Web sites offer a “password ” service that lets you provide the answer to a secret question. If you forget your password, the service will send it to you if you can remember the answer to your secret question.

The questions are often random, but sometimes the answers to these questions are freely available on the Web. Choose your questions carefully or make up the answers.

bxp will not allow you to use a secret question field, instead please contact your System Champion who’s contact details will be placed on screen where appropriate.

* Avoid using online storage

If criminals find your passwords stored online or on a networked computer, they have access to all your information.

Information Originally Sourced from http://www.microsoft.com/protect/fraud/passwords/create.aspx

[[Category:Topic:Security]]
[[Category:Topic:General Information]]

← Older revision		Revision as of 17:04, 26 June 2018
Line 137:		Line 137:
	Information Originally Sourced from http://www.microsoft.com/protect/fraud/passwords/create.aspx		Information Originally Sourced from http://www.microsoft.com/protect/fraud/passwords/create.aspx

		+	As kindly spotted by Naomi of Comparitech, the above link doesn't have much to offer anymore. She provides a very effective alternative available from http://comparitech.net/password-generator


	[[Category:Topic:Security]]		[[Category:Topic:Security]]

← Older revision		Revision as of 17:55, 25 August 2015
Line 140:		Line 140:

	[[Category:Topic:Security]]		[[Category:Topic:Security]]
−	~~[[Category:Topic:General Information]]~~

@@ Line 41: / Line 41: @@
-    Each character you add to your password increases the protection it provides.
+Each character you add to your password increases the protection it provides.
 or more characters are the minimum for a strong password; 14 characters or longer are ideal.
@@ Line 51: / Line 51: @@
-    The greater variety of characters that you have in your password, the harder it is to guess.
+The greater variety of characters that you have in your password, the harder it is to guess.
-    An ideal password combines both length and different types of symbols.
+An ideal password combines both length and different types of symbols.
-    Use the entire keyboard.
+Use the entire keyboard.
@@ Line 64: / Line 64: @@
-    The easiest way to remember your passwords is to write them down.
+The easiest way to remember your passwords is to write them down.
-    It is OK to write passwords down, but keep them secret so they remain secure and effective.
+It is OK to write passwords down, but keep them secret so they remain secure and effective.

@@ Line 18: / Line 18: @@
 # Think of a sentence that you will remember
-    Example: “My son Aiden is three years old.”
+## Example: “My son Aiden is three years old.”
+# Turn your sentence into a password.
+## Use the first letter of each word of your memorable sentence to create a string, in this case: “msaityo”.
-# Turn your sentence into a password
+# Add complexity to your password or pass phrase.
-    Use the first letter of each word of your memorable sentence to create a string, in this case: “msaityo”.
+## Mix uppercase and lowercase letters and numbers. Introduce intentional misspellings.
+## For example, in the sentence above, you might substitute the number 3 for the word “three”, so a password might be “MsAi3yo”.
+# Substitute some special characters
-# Add complexity to your password or pass phrase
+##Use symbols that look like letters, combine words, or replace letters with numbers to make the password complex.
-    Mix uppercase and lowercase letters and numbers. Introduce intentional misspellings.
+##Using these strategies, you might end up with the password “M$8ni3y0.”
 # Test your new password with the Password Strength Checker
-    The Password Strength Checker evaluates your password’s strength as you type.
+## The Password Strength Checker evaluates your password’s strength as you type.
 # Keep your password a secret
-    Treat your passwords with as much care as the information that they protect.
+## Treat your passwords with as much care as the information that they protect.