Not all Passwords are Created Equal - How to Make a Good Password

By Charlie Meyer
IT Consultant, Sudora LLC.
o. 314-993-4555

Passwords are a small hassle designed to stand in the way of unauthorized access to something. In the world of computers and Internet, your password is often the only defense of your data. This protection can vary significantly based on the "strength" or "complexity" of the password. In some cases, a weak password may offer almost no protection where a strong one may hold up to the most sophisticated attacks.

The problem is that strong passwords are hard to remember. This document lists important password rules and gives some methods for coming up with strong passwords that are easy to remember.

Password Safety Rules:

1. The longer the more secure. Most of the time 8 digits should be enough. However, each extra character has the potential to make your password over 250 times stronger. This means that the 2 extra digits of a 10 digit password have the potential to make your password over 60,000 times stronger.

2. The more types of characters the better. Types of characters include upper-case letters, lower-case letters, numbers, and special characters. Special characters such as, (!@#"|$~%^&?<>+{"`, and many more, are the most important for security.

3. Never use anything from the most commonly used passwords list. There are several versions of this list and all passwords on any of them should be avoided. You can find these by searching google.com for "most used passwords list".

4. Avoid anything that has to do with your name, address, business, or anything else that could be found or linked to you in ANY directory, especially Windows directories.

5. Avoid references to the site you are accessing. For example don't make your Bank of America password "bankamerica", or your officemax.com password "officesupplies".

6. Change your passwords on a set schedule. The shorter the schedule is the better. Make it as short as you can tolerate.

7. Do NOT write all your passwords into a document called "passwords.doc" and save it to your desktop. Handwritten paper is one of the most secure password collection/storage systems. If you choose to record your passwords in electronic format, name the document something completely unrelated to the word password. Also, make sure that the word Password IS NOT WRITTEN anywhere inside the document. Also avoid the words "username", "account", "credentials", and "access". I strongly recommend using an encryption scheme like one I listed in the Ideas for Great Passwords section. You also may want to password protect the document.

8. Do NOT write your password on a post-it and stick it on your monitor. Guard paper copies.

9. Never give your password to anybody, especially if they call you. Most password compromises are due to people freely telling their password to someone. Always offer to type your password for them before giving it to them.

10. If you do have to give your password out for something specific and unavoidable, change it to something new as soon as the other person no longer needs it.

11. Never save important passwords in browsers like Internet Explorer or Firefox. Once a password is stored in the browser it is a significantly higher risk. This also applies to Chat programs like Windows Messenger. Never save your password in the program. Always elect to type it every time.

12. Remember that the security of the passwords you type are only as secure as the computer you are typing them on. If you suspect a system of being infected with something, like a brand new computer that is running very slowly, Do NOT type any important passwords on it. There is a good chance that information that goes through this PC, like passwords, could be monitored by a virus or piece of spyware. It doesn't matter how complex your password is if it gets found out.

13. If you are concerned about the security of your data, computer or network, get the professionals at Sudora LLC involved. It is much easier to catch these problems before they become big problems. Call Sudora Computer Services at 314-993-4555 and an IT consultant will offer you the timely, valuable advice you need.