How to choose a secure password
From Supporting Role Wiki
Jump to navigationJump to search
Ways of choosing a good password
- Choose the first letter (or sound) from a memorable phrase or line from a song. So "I'm Jumping Jack Flash and it's a gas" could become "IJJFaiag" or "IJJF&i'ag".
- Length is not the most important thing, but 8 characters is a usual minimum for most systems.
- Using symbols can be very good, but be careful it you use a different keyboard (eg laptop, Mac, foreign keyboard).
- Avoid using words, even foreign ones.
- Avoid mixing words (eg "blackhat").
- Reversing a word (eg "eruces") does not help much.
- Substituting letters in a word with obvious numbers (eg "z3r0") does not help much.
- Appending dates or numbers to words (eg "england1966") does not help much.
What to do with your password
- Writing down a password is not itself insecure, as long as it is held securely. Example is a sealed envelope (which you do not reseal once opened) in a secure place (eg lock drawer or data safe). Sticking it on your monitor, keyboard or desk is not safe.
- Don't reuse a password for an important system (eg bank or email) for anything else. Reusing passwords for things you don't care about is less important.
Further reading
- Bruce Schneier on Security:
https://www.schneier.com/essay-246.html https://www.schneier.com/blog/archives/2014/03/choosing_secure_1.html
- Lockdown Password Guide
http://www.lockdown.co.uk/?pg=password_guide
