12 Tips for Making a Good Password

12 Tips for Making a Good Password

Banking websites, email accounts, instant message software and social networking sites like Facebook and MySpace all have one thing in common: passwords. Not having a good password makes it easier for hackers to break into your online accounts. Don’t feel bad though, because even businesses like Twitter.com aren’t above using a bad password.

Creating and using a good password is very important, but it’s only one layer of internet security and it’s certain not foolproof. Given enough time and computing power virtually any password can be broken. What we’re presenting is a list of several rules (suggestions, really) for creating a safe and secure a password without it being a big hassle.

First off is the don’t list. It’s one of those “including, but not limited to” things, so be sure to use your own judgment along with our suggestions. While no password is 100% secure, the more you can do to make it difficult to brute force, the better.

  1. Don’t use a single common word or phrase such as “password”, “qwerty” or “apple”. Anything found in a dictionary or is common knowledge is a bad idea. Also steer clear of abbreviations, movie names, book titles, etc. Use multiple words if at all possible.
  2. Don’t use a proper noun. Steer clear of using your name, the name of your kids or spouse, a state capital, etc.
  3. Don’t write it down. While you can argue that you have a secret/safe place that no one will ever find (under your keyboard, in your wallet, under a filing cabinet drawer, etc.) trust us… it’s not secret and it’s not safe. Keep that password in your head, not in your hand.
  4. Don’t use your password on a public computer. As tempting as it is to check your Gmail account at the library, you have no idea if anyone has installed a key logger or other password sniffing software. It’s safer to wait until you get home.
  5. Don’t give your password to anyone. Anyone. No site or service worth its salt will ever ask you for your password. Any attempt by a CSR, website, or even an email asking for your password is a scam, period.
  6. Don’t reuse a password. If you somehow have a password compromised (whether you know it or not), reusing a previously good password has now opened you up to trouble.

Next up is the do list. These tips are here to help you create not only a good password, but also to to make it difficult for someone else to crack it. Not easily, at least. 🙂

  1. Do make it memorable, but not easily guessed. Using a mnemonic, or memory aid, is a great way to remember passwords.
  2. Do use at least 6 characters. Use 8 or more if you can swing it.
  3. Do use more than one password. Each site or account, or at the very least the important ones (banks, etc.) should have it’s own, unique password.
  4. Do avoid sequences of letters or numbers. “1223334444” is an example of a very bad password.
  5. Do change your password. Every 3-6 months should be fine for personal accounts.
  6. Do feel free to be creative with spelling. There’s no reason you can’t do things like substitute an “i” with a “y” every now and again, use upper- and lower-case letters, and even use numbers, punctuation, or special characters if possible.

Sounds like a lot to have to think about, right? Actually it’s not as bad as it sounds; making a good password is more about common sense than anything else.

In closing, here are some samples of a good 8-character password. While the samples below are great for educational purposes, please don’t use them for your real password because that would go against the tip that you don’t reuse a password.

  • phU+$sHu: This is a combination of “foot” and “shoe”. Notice how the “f” is replaced with a “ph”, the “oo” with a “U” and so on.
  • Tyg3rtLE: This is a combination of “tiger” and “tail”. The “i” in tiger is changed to a “y”, “tail” was replaced with an alternate spelling (“tale”) and a vowel is removed to keep the password at 8 characters.
  • 2ND-d0*R: This is a combination of “second” and “door”. Similar character substitutions as the first 2 examples abound in this one, too.

Update: 12/27/2009 Mashable has a new article on banned Twitter passwords.

Image courtesy of paulorear

If you're looking for great anti-virus software that won't break the bank, try StopSign. You don't pay extra for tech support for difficult malware, and our web protection software just works. Download & install StopSign to find out why our members choose us over the other options.

Basics of Internet Security.

Basics of Internet Security.

With over 239 million web sites on the Internet it’s no surprise that Internet security is a hot topic. While it’s virtually impossible to nail down a solid number, it’s safe to say that there are millions of computer viruses, spyware applications, and assorted malware out there that can infect your computer. Some of that malware is merely an annoyance and some of it can do real damage. That’s where basic Internet security comes into play. You can protect yourself with a few simple tools and set them up to automatically protect you 24/7/365.

We’ve compiled a list of 3 pieces of software that most Internet security experts should agree are the core components of basic Internet security for your computer.

Firewall

A firewall is a piece of software or a device that sits between your computer and the Internet and blocks and/or filters all of the traffic before it gets into your system. In the home computing world, a firewall is more often than not software. At it’s heart, a firewall only allows certain kinds of traffic or requests to get through, and most modern firewalls allow you to customize what kind of traffic is accessible, such as email and web surfing.

Installing and configuring a firewall is is a great first-line defense against hackers trying to remotely access your computer. Once the bad guys have a foothold on your computer there’s not telling what they might do. Keep in mind, however, that a misconfigured firewall can be just as bad as not having one, so it’s best to either carefully read the firewall’s instructions or allow the default configuration to be set up by the firewall itself.

Antivirus

Detection, protection and deletion of malware such as computer worms, computer viruses, etc. are the bread and butter of antivirus software. Using a variety of virus detection techniques, antivirus software secures your emails, instant messages, and web browsers.

With the sheer number of viruses that are written and released every day, much less every year, it’s easy to see why you need antivirus software installed on your computer. Just be sure to stay updated with new patches, virus definitions, etc. otherwise you might leave yourself open to malware.

Antispyware

Spyware is generally considered to be any piece of software that is installed on your computer (usually without your permission) that tracks your computer usage, your browsing habits, and may even collect your personal information. Like it’s name implies, spyware snoops on what you do on your computer and sends that information back to the folks who wrote the spyware.

Think about all of the sensitive data on your computer (tax information, social security numbers, pictures of your kids, etc.) and all the different web sites that you visit. Now imagine if a complete stranger has access to all of that information and you have no idea they are snooping on you. Without antispyware software installed that’s a very real possibility, and you are leaving yourself open to potential computer infections.

In Closing…

There are bad guys out there who know that there are still plenty of people who aren’t protecting their computers. Keep your family’s information safe on your computer with a firewall, antivirus, and anti-spyware software.

Image courtesy of 49889874@N05

If you're looking for great anti-virus software that won't break the bank, try StopSign. You don't pay extra for tech support for difficult malware, and our web protection software just works. Download & install StopSign to find out why our members choose us over the other options.