Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.
Comment: Added password generator suggestion, linked article about password cracking

Attackers can use multiple methods, most often automated, to "crack " your password. These methods can consist of brute force attempts, dictionary attacks and social engineering (e.g., via phishing). A strong password can help deter the first two attack methods so you should keep the following in mind when selecting a password:

...

  • Use three words (or more) together but not as a phrase.
    • Could be 3 synonyms, homonyms, antonyms, rhymes, etc.
    • Examples: WonSunTon, Pleasekeysfleas, Basesbasisbasses
  • Use a made-up email address (not your own!).
    • Pick a name then a related phrase for the address.
    • Examples: Mickey@mouseworld.net, vacation@aruba.com
  • Model your password after a real or made-up URL.
    • Examples: www.whatsmypassword.com, www.nonewsisgood.org, ftp.drydesert.edu
  • Use word and number combinations that rhyme.
    • Pick two or more numbers and then a phrase that rhymes.
    • Hint: get some ideas from www.rhymezone.com
    • Examples: 43FruitTree!, 488studentsintheDebate?
  • Use a common phrase stated in an uncommon way or as a question.
    • Examples: Temperaturesensitivedevice (i.e., a thermometer), whatISamovieonadisk? (i.e., DVD)
  • Think of a personal secret (perhaps embarrassing?) that only you know.
    • Examples: asleep@Meeting!
  • Invent an imaginary phone number.
    • Consider including spaces, dashes, and parenthesis.
    • Hint: don't use 867-5309 from the 1980's song...
    • Examples:(800) Sec-urme,1-888-keepout
  • Take two or more words and swap the first letters.
    • Capitalize one or both of the first letters
    • Examples: Eink plephant,hexas Told-em!
  • Use a password generator

A good password choice is one that is very hard to guess but also easy to remember.

...