26/02/2024
Passwords and how to be sensible
You may not realise just how common it is to be hacked. These rules are intended mainly for online use so it’s not so important for your PC itself (except the Microsoft password that is also online).
Usually being hacked is a direct result of bad practise on the part of the individual.
Dave has personal experience of how many of you just break all the rules. Here are the common ones that you really must avoid:
• Really silly ones like 123456, Password123, PA$$word etc
• Names including pets, family & favourite football teams (Mollydog123)
• Your address or part of it (even repeating the digits is a bad idea)
• Any part of your email address
• Notable dates (e.g. your birthday or that of your family)
• Keyboard patterns (look at 147852 on a numeric keypad)
All these will be tried by the hacker’s algorithms (don’t think they do it manually!) and with every combination of upper and lower case.
Don’t use the same or similar password for multiple things. This is especially important for financial sites but beware that email or even Facebook may have financial implications if hackers get access. It’s often the case that people employed by the likes of BT in India make notes of passwords they set and sell these when they leave for another job!
It’s also important to choose combinations of letters and numbers that aren’t easily guessable from public data about you. For example, a quick scan of your page can tell a hacker what date you were born or even the road you live on. So, working those pieces of information into a password won’t make it impossible to guess.
Best practice is to choose a password that’s at least 10 characters long. A completely random sequence is best but if it’s something you need to remember that’s not always easy.
The longer the password, the better; the denser the mix of letters, numbers and special characters, the better; and the more nonsensical, the better. Think about a four-digit code, using only numbers and nothing else: there are 10,000 possible combinations, but add just one more digit and that goes up to 100,000. Add in letters and special characters, and extend your password up to 10 characters and beyond, and you can see how each extra letter helps.
So how do you choose this mystical combination? Security expert Bruce Schneier suggests turning a random sentence (not a famous quotation or phrase) into your password. For example, “We love getting e-mail from Grandma, but she rarely writes one.” is a unique sentence that can become “Wlge-mfG,bsrw0.” by taking the first letter of every word (except for “e-mail,” which becomes “e-m”, and “o”, which becomes “0”). The result is a password with random letters, numbers, symbols, and plenty of digits—and one that you can easily call to mind by remembering the full sentence. Don’t use that one though as it’s probably already in the hacker’s database! Make your own one!