Subject:*
Name/Email:*
Message Icon:*
Message:*
url email imgsrc image php hide code quote
English Nederlands 
SAMPLE
alignleft aligncenter alignright bold italic underline linethrough   


 [more...]
Options:*
 

 

 
   
Re: Strong, memorable passwords

by skenow on 2011/6/7 8:25:57

Creating a pass phrase instead of a pass word is a very good practice. Another level of complexity to add is something unique to each instance of the passphrase - don't just use the same passphrase on every site.

Add part of the URL or site name to your passphrase and now you've got a unique passphrase for every website, but it's still easy to remember.

iCmS/50BdStSyCdDeUdKm@123456.com
or 50BdStSyCdDeUdKm@123456.com[impresscms]

and there you have it!
Re: Strong, memorable passwords

by sato-san on 2011/6/7 4:41:00

A very nice idea! You should write a blog about it.
Re: Strong, memorable passwords

by Vaughan on 2011/6/7 2:51:37

people choose easy passwords for mainly 2 reasons;

1. they don't understand the impact of security & how easily passwords can be cracked or guessed or the tricks crackers use to gain access.
2. because an easy password is easy to remember:

password is easier to remember than 1Rthg&6FW

but why should a password be hard to remember? because people over-think them, and because of reason 1 above.

so how would you go about making a password that seems random, but is easy to remember & contains all the neccessary requirements?

think about it logically. 1 way of producing a memorable random password that contains no words and makes no sense whatsoever but is easy to remember to yourself.

take your address for example

199 Bond Street,
Staveley
Chesterfield
Derbyshire
United Kingdom

everyone knows their own address & phone number.

so a password derived from your address that is easy to remember.

199BdStSyCdDeUdKm

strengthen that by turning it into an email like address

199BdStSyCdDeUdKm@123456.com

where 123456 is your phone number.

and there you have a very long password, easy for you to remember. i took the 1st & last letter of each word of the address.

it could be your mothers address, friends work address. the point is, you derived your password from something that you can easily remember & turned it into a phrase that can be easily recounted by yourself.

that is 1 way of producing a good strong password. it doesn't need to be random, but it does need to be remembered.

[edit]
the above address is fictional btw. it does not exist, i'm not that dumb. (for those spammers that think i might be) just thought i'd mention that!!!!
Re: Strong, memorable passwords

by david on 2011/6/7 1:40:02

How about a simple link to some password tips on the Wiki?
Re: Strong, memorable passwords

by fiammybe on 2011/6/7 1:17:58

This is a good idea! From an ImpressCMS standpoint, it could be hard to invent something that pushes people to do this. I could imagine a warning when the password is too short or not having numbers or uppercase or symbols, but is still remains the responsability of the user to have a decent password.

The warning might be possible though. Any ideas on this?