Good Password Guidelines

Post Reply New Topic

Is it possible there can be a sticky on creating strong passwords, and not sharing passwords between accounts? Mostly for being informative.

Hack. Hack. Cough.

I use a password generator. It allow you to pick how many characters you want, if you want high and lower case letters, symbols like % &, and it makes a random password for you.

Also don't give out hints about what type of passwords you use or if you use the same passwords.

Unfortunately we cannot create new stickies.

Obligatory XKCD:

Use a passphrase as the "Master Password" for your password manager, and for anything where you can't use your password manager (like your computer itself). Use completely random, completely unrememberable, and long passwords for all of your accounts and get the password manager to deal with them. That way, if one of your accounts is compromised then the others will be fine.

Has anyone here successfully changed their password?
I mean, changed it and NOT still been able to log on with the old password?

Who cares?

Bank and important e-mails passwords should be unique and difficult to guess/break but as for websites, games and such I don't think a "strong" password is that needed. On one of forums my password is a 5 letters long... name (lol, don't blame me, I was 13 when I registered, I knew nothing about security and I don't care about that account enough to bother changing it) and still noone but me logged there.

More important than the password itself is having different passwords for different services, especially ones that don't have a strong security system (lists of passwords leaking are a real issue) or could be a scam(don't put your commonly used password on a website you don't trust). A base password or two with 2-4 variable characters that you make for each website using an easy to remember (for you) system/code only you know details of should do the trick. Even if the password leaks noone will bother to guess what the changed part is just to hack into your "kongregate" account and such.
Just remember to use totally different passwords for valuable services. Use longer passwords that contain letters, numbers and special signs and mess a little bit with the order so it's not "Commonword100%" but more like "Co1mm0nw0r%d".

Also make sure you never tell anyone your password. It's a common sense but can not be so obvious to some of us. I got conned into doing it once when I were 14. Fortunately it was just an online game but losing all of the items I earned for a year of playing did hurt.

Make it look like a line out of a rather wacky cookbook:

10% Hydrogenated Watermelon - coarsely chopped.

or

7#3 oz: Sour Lemon Farts

or

3 tons & 2 grams Finely chopped dog ears

If they don't allow spaces, leave the spaces out.

You basically end up with a passphrase that is easy to learn but contains upper case, lower cases, numerical, and punctuation characters.