I kind of have a thing for passwords.
I've blogged before about "type the picture" passwords so difficult they are impossible.
So naturally I read a story about how 8068 is the least popular pin for MAC cards. The three most popular? 1234, 1111, and 0000. Its not that these are just bad passwords; its that researchers calculate that those three comprise approximately 20 percent of all passwords. Find a MAC card on the street and use those three combinations and you have a one-in-five chance of guessing correctly.
Other findings: people prefer evens over odds, more passwords start with 1 than any other number, followed by 0 and 2, 8675309 is the fourth-most popular seven-digit password, and passwords with large gaps between numbers (29, 37) are disfavored.
I myself continually searched for ways to make passwords for 25 different sites easy to remember while simultaneously making them hard to guess. Based on the study cited above, most people are at least going for that first one. Then I read a story saying that most password advice we were given accidentally made most of our passwords hard to remember, but easy for a computer program to guess. I'll pass along the secret to a really great password: make up some nonsense phrase containing at least one number, take the first letter of each word plus the numbers as your password ...
Phrase: I Made 10 Passwords When I Was 57.
PW: Im10PwIw57
Easy to remember because its something you came up with that can have some meaning to you (unlike the easy to figure out birthday or family name) but very hard to guess, becuase its 10 digits containing both caps and lowercase and numbers. You can even come up with something site specific, so that every site is different...
Bank:
Phrase: I Have 10 Dollars At Continental Bank
PW: Ih10DaCb
Credit Card:
Phrase: I Have 10 Dollars At Mastercard
PW: Ih10DaM
Again, easy to remember all your logins, but hard for a computer to guess, and if one password is compromised, its hard for a hacker to get into all your accounts. Also, you never need to follow the advice (which seems to be falling out of favor anyway) of changing your passwords every month or 6 months or whatever. If a hacker gets your password, he'll likely use it almost immediately. Changing your password is nothing but a hassle for you.
I've blogged before about "type the picture" passwords so difficult they are impossible.
So naturally I read a story about how 8068 is the least popular pin for MAC cards. The three most popular? 1234, 1111, and 0000. Its not that these are just bad passwords; its that researchers calculate that those three comprise approximately 20 percent of all passwords. Find a MAC card on the street and use those three combinations and you have a one-in-five chance of guessing correctly.
Other findings: people prefer evens over odds, more passwords start with 1 than any other number, followed by 0 and 2, 8675309 is the fourth-most popular seven-digit password, and passwords with large gaps between numbers (29, 37) are disfavored.
I myself continually searched for ways to make passwords for 25 different sites easy to remember while simultaneously making them hard to guess. Based on the study cited above, most people are at least going for that first one. Then I read a story saying that most password advice we were given accidentally made most of our passwords hard to remember, but easy for a computer program to guess. I'll pass along the secret to a really great password: make up some nonsense phrase containing at least one number, take the first letter of each word plus the numbers as your password ...
Phrase: I Made 10 Passwords When I Was 57.
PW: Im10PwIw57
Easy to remember because its something you came up with that can have some meaning to you (unlike the easy to figure out birthday or family name) but very hard to guess, becuase its 10 digits containing both caps and lowercase and numbers. You can even come up with something site specific, so that every site is different...
Bank:
Phrase: I Have 10 Dollars At Continental Bank
PW: Ih10DaCb
Credit Card:
Phrase: I Have 10 Dollars At Mastercard
PW: Ih10DaM
Again, easy to remember all your logins, but hard for a computer to guess, and if one password is compromised, its hard for a hacker to get into all your accounts. Also, you never need to follow the advice (which seems to be falling out of favor anyway) of changing your passwords every month or 6 months or whatever. If a hacker gets your password, he'll likely use it almost immediately. Changing your password is nothing but a hassle for you.