Security Corner

Jan 9 2011   11:45PM GMT

New Year Resolutions: Let’s Review Password Best Practice



Posted by: Ken Harthun
Tags:
Password
Security best practice

It’s always a good thing to repeat good advice and what better time to do so than when people are making resolutions to improve their lives in the coming year?

Nearly three years ago, when I was just starting this blog, I posted Can a Criminal Hacker Guess Your Password?. That post had some good advice on what not to do. Here it is again:

According to Wikepedia there are several things many people use as passwords that results in their being predictable:

Repeated research has demonstrated that around 40% of user-chosen passwords are readily guessable because of the use of these patterns:

  • blank (none)
  • the word “password”, “passcode”, “admin” and their derivates
  • the user’s name or login name
  • the name of their significant other or another relative
  • their birthplace or date of birth
  • a pet’s name
  • automobile license plate number
  • a simple modification of one of the preceding, such as suffixing a digit or reversing the order of the letters.
  • a row of letters from a standard keyboard layout (eg, the qwerty keyboardqwerty itself, asdf, or qwertyuiop)

So, if you want to protect your router and the other devices on your network, never use anything from the above list and apply Security Maxim #4: Use an unguessable, or difficult-to-guess password always.

Have a safe, happy and secure 2011!

 Comment on this Post

 
There was an error processing your information. Please try again later.
Thanks. We'll let you know when a new response is added.
Send me notifications when other members comment.

REGISTER or login:

Forgot Password?
By submitting you agree to receive email from TechTarget and its partners. If you reside outside of the United States, you consent to having your personal data transferred to and processed in the United States. Privacy

Forgot Password

No problem! Submit your e-mail address below. We'll send you an e-mail containing your password.

Your password has been sent to: