{"id":1155,"date":"2018-11-19T09:30:29","date_gmt":"2018-11-19T01:30:29","guid":{"rendered":"https:\/\/jtlk.net\/apps\/base\/?p=1155"},"modified":"2020-11-22T04:33:30","modified_gmt":"2020-11-21T20:33:30","slug":"a-brief-suggestion-to-create-strong-yet-memorable-password","status":"publish","type":"post","link":"https:\/\/www.jtlk.net\/apps\/base\/?p=1155","title":{"rendered":"Create a strong yet memorable password"},"content":{"rendered":"<p>In the digital world, passwords are used and required for many applications and services.<br \/>\nAccess to your PC or to your email account will require a password, as will access to your favourite online shop or the web access to your bank.<br \/>\nPasswords are the digital version of our traditional door keys, and yes, there are already possibilities to replace traditional door keys also with a digital lock or even your mobile phone.<br \/>\nPasswords help to protect your data and your privacy.<\/p>\n<p>It is strongly recommended to use different passwords for different applications.<br \/>\nThis, to avoid granting access to all the digital services you use at once if ever one of your passwords should be compromised, be it accidentally from your side or from the service provider side.<br \/>\nJust as a reminder, see what recently happened at <a href=\"https:\/\/jtlk.net\/apps\/base\/?p=1079\">Cathay Pacific and the privacy breach<\/a>.<\/p>\n<p>The tricky thing with passwords is that on the one hand the password shall be strong, i.e. as random as possible to avoid guessing or easy password cracking, but on the other hand you shall be able to remember the password.<\/p>\n<p>Here are some tips for creating a safe and secure password.<\/p>\n<p><!--more--><\/p>\n<p>Make sure that the password is strong.<\/p>\n<ul>\n<li>It should contain <a href=\"https:\/\/assets.amuniversal.com\/18bee1106d5901301d7d001dd8b71c47\" rel=\"noopener noreferrer\" target=\"_blank\"><br \/>\n<img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/assets.amuniversal.com\/18bee1106d5901301d7d001dd8b71c47\" alt=\"https:\/\/dilbert.com\/search_results?page=2&#038;terms=password\" width=\"240\" height=\"200\" align=\"right\" \/><\/a><\/li>\n<ul>\n<li>upper case letters (A-Z),<\/li>\n<li>lowercase (a-z) letters, <\/li>\n<li>at least one number (0-9),<\/li>\n<li>and at least one special character, e.g. !#$%^&#038;*_-+=?().<\/li>\n<\/ul>\n<li>Don&#8217;t reuse any of your last five passwords. Even though the password history requirement lets you reuse a more recent password, you should select something that the attacker can&#8217;t guess.<\/li>\n<li>It shall not be a word that can be found in a dictionary, or a combination of dictionary words.<\/li>\n<li>It should not rely on &#8220;obvious&#8221; substitutions, e.g. H0use isn&#8217;t strong just because of replacing &#8216;o&#8217; with &#8216;0&#8217;. <\/li>\n<\/ul>\n<p>Certainly, being able to remember the created password is equally important.<br \/>\nIf you&#8217;re using a password manager, those will likely create very strong passwords and take over the task to remember it for you &#8211; just that you now rely on this application and it&#8217;s database to not getting lost, broken or stolen and that it is available and functional when and where you need it.<\/p>\n<p>My tool of choice is <a href=\"https:\/\/keepass.info\/\">KeePass Password Safe<\/a>, a free, open source and easy to use cross platform solution to manage passwords.<br \/>\nIt is available on Windows, on Linux and also on Android and iOS for mobile phones. This makes it convenient to have your passwords with you, even if you&#8217;re not in front of your PC and yet your passwords are protected.<br \/>\nAs with all important data, regular backup of the working password eWallet is a must.<br \/>\nAnd of course, you can still create your own memorable passwords and use <a href=\"https:\/\/keepass.info\/\">KeePass<\/a> simply to store the ever increasing number of passwords in a safe place.<\/p>\n<p>One trick, to create a rather random and strong password that you can still remember as well, is to derive the password from a sentence.<br \/>\nFor example, &#8220;When I wake up in the morning at 6:00am, I first open my eyes.&#8221; could be turned into &#8220;WIwuitm@6:00am,Ifome.&#8221; That is a rather strong password at 21 digits with mixed letter, numbers and special characters.<\/p>\n<p><a href=\"https:\/\/xkcd.com\/936\/\" rel=\"noopener noreferrer\" target=\"_blank\"><br \/>\n<img decoding=\"async\" src=\"https:\/\/imgs.xkcd.com\/comics\/password_strength.png\" alt=\"\" \/><br \/>\nComic from XKCD on passwords<\/a><\/p>\n<p>Another approach as proposed on the <a href=\"http:\/\/world.std.com\/~reinhold\/diceware.html\" rel=\"noopener noreferrer\" target=\"_blank\">Diceware webpage<\/a> is to use 6 random words that are not in any grammatical or logical order.<br \/>\nAs the name my imply, you&#8217;re to roll a dice and write down the numbers in a sequence of 5 numbers (each between 1-6) for each word and then pick the words corresponding to the resulting 5 digit number from the list provided at the <a href=\"http:\/\/world.std.com\/~reinhold\/diceware.html\" rel=\"noopener noreferrer\" target=\"_blank\">Diceware website<\/a>.<br \/>\nThe use of dice help to improve the randomness of the words mixed together, as it&#8217;s traditionally rather difficult for people to come up with random combination of words.<br \/>\nAnd because the resulting password is a list of words, it should be fairly easy to remember.<\/p>\n<p>Of course you could also follow along with the following joke:<\/p>\n<blockquote><p>I changed my password to &#8220;incorrect&#8221;. So whenever I forget what it is the computer will say &#8220;Your password is incorrect&#8221;.<\/p><\/blockquote>\n<p>An additional complication comes with different password requirements by different applications or organizations.<br \/>\nAnd yet this may help to ensure that you don&#8217;t get tempted into using the same password for different websites and applications &#8211; a good thing.<br \/>\nThe bank HSBC, for example, has the following requirements for your password:<\/p>\n<blockquote><p>Your password is <strong>not<\/strong> case-sensitive and must be between 8 and 30 characters.<br \/>\nIt must include only letters, numbers or the characters @ _ &#8216; . &#8211; ? ! $ * =. <\/p><\/blockquote>\n<p>And I&#8217;m sure the additional advise offered together with the requirements for the password does by now sound familiar to you:<\/p>\n<blockquote><p>To protect your security, do not use the same password on different websites<br \/>\n and do not use easy-to-guess information such as your name,<br \/>\nidentification number or date of birth.<\/p><\/blockquote>\n<p><!-- https:\/\/dilbert.com\/search_results?terms=password --><br \/>\nHave a safe online experience.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>In the digital world, passwords are used and required for many applications and services. Access to your PC or to your email account will require a password, as will access to your favourite online shop or the web access to your bank. Passwords are the digital version of our traditional door keys, and yes, there [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[23,629],"tags":[],"_links":{"self":[{"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/posts\/1155"}],"collection":[{"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1155"}],"version-history":[{"count":11,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/posts\/1155\/revisions"}],"predecessor-version":[{"id":1510,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=\/wp\/v2\/posts\/1155\/revisions\/1510"}],"wp:attachment":[{"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1155"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1155"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.jtlk.net\/apps\/base\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1155"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}