Create Strong Passwords
- Don't use easy-to-guess passwords such as "password," "1234," your user name or any word that appears in a dictionary.
- Don't use your pet's name, street address, date of birth, mother's maiden name, nickname or anything easily guessed.
- Combine numerials and letters. Use uppercase and lowercase along with special characters such as the exclamation point.
- Create longer passwords for the most sensitive sites. For example, consider 16 characters for banks.
- Create strings that appear random to others. For instance, think of a phrase like "Mary had a little lamb." Then start your password by using only the last letter of each, as in "ydaeb." Then insert numerals or special characters. Mix it up by making every other letter uppercase.
Secure Your Passwords
- Don't write your passwords on sticky notes attached to your monitor. If you do write them on paper, keep them in a secure place such as wallet or safe.
- Encrypt any computer files you use to store passwords.
- Avoid reusing passwords at different sites. If you must in order to remember them, share passwords only for low-risk uses such as newspaper registrations.
- Change passwords when you have a reminder sent via e-mail. Delete the e-mail immediately.
- Change passwords on a set schedule, such as the first day of spring, summer, etc.
- Guard your e-mail password, as that can be used by others obtain "reminders" for other passwords. Change it after visiting insecure locations like cybercafes.
- Create a system for remembering passwords without having to write them down. For instance, begin with your random-looking string and add a constant you memorize, such as "4!5." End with something related to the Web site you are creating the password for, such as the first four consonants of the domain name.
Reprinted from Associated Press article by Anick Jesdanun, June 1, 2004. See full article text.
Laboratory Overview | Research | Outreach & Training | Available Resources | Visitors Center | Search