Blogs

How to create secure passwords that are memorable

By Ronald Berry posted 06-06-2011 16:30

  
The Security Now podcast has some ground breaking information about how to create passwords. Length is hugely important

Which of the following two passwords is stronger,
more secure, and more difficult to crack?

D0g.....................

PrXyc.N(n4k77#L!eVdAfp9

You probably know this is a trick question, but the answer is: Despite the fact that the first password is HUGELY easier to use and more memorable, it is also the stronger of the two! In fact, since it is one character longer and contains uppercase, lowercase, a number and special characters, that first password would take an attacker approximately 95 times longer to find by searching than the second impossible-to-remember-or-type password!

Go to Steve Gibson's Password Haystacks page to see the science behind this and how to create good secure passwords.
5 comments
86 views

Permalink

https://my.ptg.org/blogs/ronald-berry/2011/06/06/how-to-create-secure-passwords-that-are-memorable

Comments

Ed Sutton
06-19-2011 21:11

I find this very helpful!
Ed Sutton rPt 49 :-)

Keith McGavern
06-07-2011 11:33

Looks like Last Pass is browser specific. 1Password works for all the browsers I use: Safari, Firefox, Flock, Chrome, and other browsers as well. The four I mentioned are sufficient for now. Of course, there is a cost factor.

Keith McGavern
06-07-2011 11:28

Can't rely on my memory anymore, Ron :-)

Ronald Berry
06-07-2011 10:21

I have Last Pass which is a similar online password manager. The idea of Password Haystacks is that you can make more memorable passwords that are strong. What Steve is talking about is how to create your own passwords rather than generating unmemorable random ones.

Keith McGavern
06-06-2011 18:59

I use 1Password http://agilebits.com/products/1Password to create all passwords ... over 120 thus far for me ... plus it does other things as well.