Your Password Is Too Easy!

15 replies
I was just reading an interesting thread here about
passwords and I thought I'd create another thread
to show newbies how to make their password stronger
without changing it that much so that they won't
forget it.

Most people get their accounts hacked
because they use easy-to-guess passwords.

So let me show you something...

Let's say for example that your password is:

johnwarren232

John Warren is your name and the numbers mean
23rd February, your date of birth.

A person who doesn't know you won't guess your password,
but a person who knows your name, and your date of birth
can figure it out quite easily.

Some people will use capital letters to make it
stronger, like this:

JohnWarren232

This is good, but you can still make it much stronger
than that without making it too difficult to remember.
All you have to do is replace some letters with numbers.
Replace:

'O' with 0
'E' with 3

And you'll have this:

J0hnWarr3n232

As you can see the password now is much, much stronger
than the first one, and it's not too difficult to remember
either.

Of course I still wouldn't recommend using your name
or your date of birth in your password either. Best thing
to do IMO is create bogus words and numbers that only
you understand.

Cheers.
#easy #password
  • Profile picture of the author Dave Rodman
    Banned
    Or you could just use something like 1password or roboform.

    Or if all else fails, just use 123456
    {{ DiscussionBoard.errors[3097074].message }}
    • Profile picture of the author Dan C. Rinnert
      Originally Posted by Dave Rodman View Post

      Or if all else fails, just use 123456
      I hate it when people leave cheeky posts. You know the ones where people will take a post topic and make a joke out of it.
      Signature

      Dan's content is irregularly read by handfuls of people. Join the elite few by reading his blog: dcrBlogs.com, following him on Twitter: dcrTweets.com or reading his fiction: dcrWrites.com but NOT by Clicking Here!

      Dan also writes content for hire, but you can't afford him anyway.
      {{ DiscussionBoard.errors[3097104].message }}
      • Profile picture of the author Dave Rodman
        Banned
        Originally Posted by Dan C. Rinnert View Post

        I hate it when people leave cheeky posts. You know the ones where people will take a post topic and make a joke out of it.
        I had a purpose to my post, I just added cheekiness as a closer. Much different than trying to make fun of the OP and banter with friends who do the same.
        {{ DiscussionBoard.errors[3097483].message }}
        • Profile picture of the author Dan C. Rinnert
          Originally Posted by Dave Rodman View Post

          I had a purpose to my post, I just added cheekiness as a closer. Much different than trying to make fun of the OP and banter with friends who do the same.
          No one was trying to make fun of the OP and bantering with other people is the kind of thing that takes place on a discussion forum.
          Signature

          Dan's content is irregularly read by handfuls of people. Join the elite few by reading his blog: dcrBlogs.com, following him on Twitter: dcrTweets.com or reading his fiction: dcrWrites.com but NOT by Clicking Here!

          Dan also writes content for hire, but you can't afford him anyway.
          {{ DiscussionBoard.errors[3097511].message }}
          • Profile picture of the author Dave Rodman
            Banned
            Originally Posted by Dan C. Rinnert View Post

            No one was trying to make fun of the OP and bantering with other people is the kind of thing that takes place on a discussion forum.
            It's one thing if you're at least trying to be helpful. THe thread I pointed to was where you didn't attempt to answer the question. Certain warriors like to turn threads into jokes when they don't think the topic is conversation-worthy, regardless of it's worthy to the OP.
            {{ DiscussionBoard.errors[3098831].message }}
            • Profile picture of the author jbpatlanta
              What I always do is to make up a sentence that is easy to remember and use the first letters. I alternate caps and lower case and I sub in numbers and symbols if I can.

              For example, lets say my wife's name is Susan Parker and I got married on February 12 at 3:00 and it was a snowy day.

              I would make a sentence like this:

              I married my wife Susan Parker on February 12 at 3:00 in the snow.

              My password would be:

              ImMw,SpOF12@3pMiTs

              I can almost guarantee you no one can crack it by guessing it.

              Jon
              Signature

              "DO or DO NOT. There is NO try!" -- Yoda

              {{ DiscussionBoard.errors[3099385].message }}
              • Profile picture of the author CyberSorcerer
                Originally Posted by jbpatlanta View Post

                I would make a sentence like this:

                I married my wife Susan Parker on February 12 at 3:00 in the snow.

                My password would be:

                ImMw,SpOF12@3pMiTs

                I can almost guarantee you no one can crack it by guessing it.

                Jon
                You are right in that "no one" will guess it. But a password cracker program will.

                Most passwords are hashes with MD5, SHA1, AES, etc before there stored into a database. This stops people that get access to the database, through SQL-Injection, from seeing the password in plan text.

                What a password cracking program does is it takes a "word list" which normally is a dictionary, sure names, last names, countries, cities, states, etc you name it and there's a list for it in multiple languages. Anyway, it loads these list and encrypts each password and compares it to the hashes password and if it's a match, wala password cracked.

                Now this is just covering popular word list, which is normally the starting point. There is also brute force which will go through EVERY combination of the alphanumeric plus special characters, up to a number of character places the hackers chooses and eventually it will guess your password. Just a matter of time.

                Now there more advanced features such as rainbow tables and such but this isn't the subject matter for WF.

                I hope I shed a little light on passwords for people.
                {{ DiscussionBoard.errors[3099459].message }}
                • Profile picture of the author jbpatlanta
                  I figure passwords are like a lock on your car. It will keep out the average person but if someone really wants your stuff, they will find a way to get it.

                  Jon
                  Signature

                  "DO or DO NOT. There is NO try!" -- Yoda

                  {{ DiscussionBoard.errors[3099590].message }}
    • Profile picture of the author sakura5881
      Originally Posted by Dave Rodman View Post

      Or you could just use something like 1password or roboform.

      Or if all else fails, just use 123456
      LOL. :p

      On a more serious note, I'll definitely try these out!
      Signature

      My blog ~ http://moneyonlinemom.blogspot.com/

      Tips on surveys, offers, and GPT sites!

      {{ DiscussionBoard.errors[3097125].message }}
  • Profile picture of the author JoMo
    I read somewhere that a hacker got a hold of a bunch of passwords and released what he had found and the #1 password being used was 123456 and the #2 password was "password"!

    Apparently the short bus ain't so short any more.



    joel
    Signature

    Give Personalized Gift-Plaques for All of Those Special Occasions

    The Best Hand Safety Products for the Workplace or DIY's

    {{ DiscussionBoard.errors[3097096].message }}
  • Profile picture of the author Dennis Gaskill
    That's good advice for keeping out people who know you. For people that use password cracking programs though, as I understand it, some have what is called a "leet" feature. That means they make substitutions such as the letter O for the number 0, the @ symbol for the letter "a" and so forth.
    Signature

    Just when you think you've got it all figured out, someone changes the rules.

    {{ DiscussionBoard.errors[3097115].message }}
  • Profile picture of the author Rob Maggs
    [DELETED]
    {{ DiscussionBoard.errors[3097137].message }}
    • Profile picture of the author alwaysready
      Nice remarks ! i really do like this , actually i come up always with very strange and complicated password , but i have to admit this way is interesting and useful ! Thank you for sharing it any way
      {{ DiscussionBoard.errors[3097214].message }}
  • Profile picture of the author Theory5
    I use a trick to remember my passwords. I have a mnemonic-like password, that allows me to modify it easily. to get an even stronger password I take a password and turn letters into numbers like e is 3 and o is 0 and l or i is 1
    {{ DiscussionBoard.errors[3097695].message }}
  • Profile picture of the author JoMo
    Wow, people are really on edge these days.
    Signature

    Give Personalized Gift-Plaques for All of Those Special Occasions

    The Best Hand Safety Products for the Workplace or DIY's

    {{ DiscussionBoard.errors[3097791].message }}
  • Profile picture of the author vip-ip
    My password is similar in nature to HR,In%u&

    I think I'm good

    Best Regards,
    vip-ip ...
    Signature
    {{ DiscussionBoard.errors[3099395].message }}

Trending Topics