Sunday, November 20, 2011

What makes a good password ?

Okay, this is one place where you don't (should not) ask google:
http://www.lightbluetouchpaper.org/2011/11/08/want-to-create-a-really-strong-password-dont-ask-google/

http://xkcd.com/936/  <-- interesting, easy to understand, and best:  easy to remember !!

** READ THIS ** http://www.theatlantic.com/magazine/archive/2011/11/hacked/8673/1/?single_page=true James Fallows had first hand personal collision with email passwords and has some recommendations that can help you prevent those troubles from visiting you as well. ** READ THIS **

http://world.std.com/~reinhold/diceware.html <-- if you have not already read this, do it now.  note: Reinhold suggests staying away from computer randomized sources of "random" numbers.   Diceware FAQ Questions and answers for people who want to know more about Diceware and passphrase generation.   Diceware Word List, the list in PostScript format, Beale word list, Diceware8k list for computer generation

----------- then you already know what makes a BAD password (hint: it starts with 123...) --------
http://www.techworld.com.au/article/407952/123456_worst_passwords_2011/

Anyway, here's the full list:
1. password
2. 123456
3. 12345678
4. qwerty
5. abc123
6. monkey
7. 1234567
8. letmein
9. trustno1
10. dragon
11. baseball
12. 111111
13. iloveyou
14. master
15. sunshine
16. ashley
17. bailey
18. passw0rd
19. shadow
20. 123123
21. 654321
22. superman
23. qazwsx
24. michael
25. football

And a very similar list in NYT:
http://www.nytimes.com/2010/01/21/technology/21password.html


note: post updated since original date

No comments: