Friday, January 22, 2010

How to create secure passwords you can remember | Security Central - InfoWorld

So I decided to take a little hiatus for the holidays... and for the beginning of the semester.  Can you blame me?  I am still working on my blogging rhythm, and how it fits into my life.  When you work with technology, sometimes (or most of the time) there is so much to do that time just flies by.  I did have some thoughts to share today, however.


Today I read an interesting article about passwords. 
How to create secure passwords you can remember | Security Central - InfoWorld

Posted using ShareThis

I will admit that I am that first person to comment on the article.  I thought that this article raises some good points.  Most of the time when you are confronted with a password-creating situation, it's hard to really think of what you want to use.  It's much easier when you think about what you would like to do ahead of time.  I had posted in the comment section that what I like to do is commit a new password to muscle memory.  Someone responded to my comment saying that some corporations have a password changing policy to be so frequent that muscle memory would be useless.  We are working on a password changing policy in our organization, but I don't think it will be as frequent as I believe the thirty-day default is in Active Directory.  Still, I can see where committing passwords to muscle memory would have its uses.

I also like the tip number 4, of using a password based on a favorite song or movie phrase.  I have been using that idea for years!  You want something that means something to you, without it really being connected to personal information about you.  That's a good way to think about inspirations for passwords.

One final note is that I know for web passwords, I like to use a handful, with different security levels based on the usage.  If the site has a lot of personal information and credit card information, I like to use a more secure password.  If a site needs a password so that you can just access the content, without really having much information about you stored, then I use one of my less secure standbys.  Aviod using plain words, especially with personal information, at all costs.  At least these are my thoughts on passwords.  What are yours?