How to make a strong password?


I would argue that no password is secure, but that some passwords are stronger than others. What are your techniques for creating a stronger password?

Tags: password, security

Topic rating:
     

All-time Newest A to Z Time Travel Chart
Author's Pick:
I use complex, non-word passwords image I use complex, non-word passwords

I use upper-case, lower-case, integers, and symbols. They're all right next to my computer in a notebook. Or, my list of passwords is encrypted using gpg (or similar) and I just need to decrypt that list whenever I need the password for my online banking account.

1.  

I use complex, non-word passwords

Leader! Most 1st Place Votes
I use upper-case, lower-case, integers, and symbols. They're all right next to my computer in a notebook. Or, my list of passwords is encrypted using gpg (or similar) and I just need to decrypt that list whenever I need the password for my online banking account.

Comments 1 Comment

 
9  votes
2.  

I use the same password for everything.

So I only have to remember one!

Comments Discuss

 
4  votes
3.  

I use a template password and add a suffix to it.

Each password is unique, but similar to the others. This makes it easier to remember a bunch of passwords.

Comments Discuss

 
4  votes
4.  

I use an acronym!

"I love easy cheese on a cracker with a smoked baby clam" becomes ILECOACWASBC. (It's sounds gross, I know, but it is one of my favorite snacks--and not one of my passwords!!!)

Comments 2 Comments

 
3  votes
5.  

Use Pwgen

Using the command line tool or web interface at http://pwgen.net

Anything but a dictionary word solves about 99% of problems, in my experience.

Comments Discuss

 
1  votes
6.  

1Password

I mentioned this in a comment, but thought it better as an answer. http://agilewebsolutions.com/products/1Password

Comments Discuss

 
1  votes
7.  
 
1  votes
8.  

Rotation Over Time

I've used the same five or so passwords since I started using computers, but I rotate them every few months and occasionally change the scramble so something like. pas5word becomes pa5sw0rd So far it's worked very well and I've never had anything hacked yet. *knock wood*... [show more]

Comments Discuss

 
1  votes
9.  

Why should I care about a strong password?

Nobody is out to get me and I have nothing to hide.

Comments 1 Comment

 
0  votes
10.  
 
0  votes
11.  
 
0  votes
12.  

I use a word in the dictionary.

It's easy to remember and I've been using it for several years.

Comments 5 Comments

 
0  votes

Topic History

ImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImgImg
See Older Activity
skiwhitefish added an answer: "Rotation Over Time"  (9 months ago)

Comments     Leave a comment Leave a comment

Avatar Image
      Thumbs down Thumbs up   
degldn degldn: 98 points   10 months ago

It really depends on the context of the password. For system access / google I use a complex password with numbers and symbols, non dictionary of course. For something trivial I use a standard root with prefix ans suffix specific to the site and containing the date the account was initiated.

I store passwords in the os x keychain application manually. The password to access that is only in my brain, is at least 15 characters long, usually a long acronym, with some of the letters replaced with symbols.

Reply to this comment  Reply     Link to this comment Link
Avatar Image
      Thumbs down Thumbs up   
jneff-staff Modwest Team: 120 points   10 months ago

Good to see ya Dan! Still in Chicago?

I like the OS X Keychain, but I find myself needing my passwords when I'm not at my machine and it's not accessible, so keep my GPG encrypted list stashed away in various places that I can get to remotely.

Link to this comment Link
Reply to this comment  Add a Reply    
Avatar Image
      Thumbs down Thumbs up   
jmasterson-staff Administrator: 628 points   9 months ago

Speaking of strong passwords: http://blog.modwest....password.html

Reply to this comment  Reply     Link to this comment Link
Avatar Image
      Thumbs down Thumbs up   
squiggle squiggle: 692 points   9 months ago

I was just thinking how an on-line strong password generator could be used to build an attacking dictionary for each referring link.

Link to this comment Link
Avatar Image
      Thumbs down Thumbs up   
jneff-staff Modwest Team: 120 points   9 months ago

Not sure I follow, but maybe I do.

So, I setup an on-line password generator site for people to use, then keep track of the remote IP of the requester, as well as the list of crazy-random password suggestions for that requester, and then use those passwords in an attack against the requester. That'd be somewhat diabolical!

Link to this comment Link
Avatar Image
      Thumbs down Thumbs up   
squiggle squiggle: 692 points   9 months ago

I was thinking of the referring URL.

The lack of https and a valid certificate would also put me off.

Link to this comment Link
Reply to this comment  Add a Reply    

Topic Details

This topic was started by jneff-staff Modwest Team: 120 points on February 5th, 2009. 17 members have voted on one or more of the 12 answers.

Tags: password, security

Get Notified

Get email notifications and feed updates on your home page by turning on the options below. You can also subscribe to topics automatically.

Please login or register to see notification options.