Passwords They can be easy but very difficult to crack.

Why Passwords Identification, Authentication Last level of security for incoming data It is needed to get on some one else computer Some one can masquerade as you on your account or computer An insecure password can wreak havoc in your life Through your account some one can compromise the local network

The Do Not of Passwords Do not use Proper Nouns Do not use Dictionary Words Do not use Foreign Words Do not use sequences Do not use words with vowels removed Do not put the password on a sticky note next to the keyboard or monitor Do not put username and password on same piece of paper Do not use personal information for password Do not use words written backwards Do not use words with numbers added to the end

The Do of Passwords Do use a password with 8 or more characters Do use Upper Case letters Do use Lower Case letters Do use numbers Do use special characters such $, & Do use mnemonic phrase Do use memorable phrase Do use substitution Do use a wallet or purse to keep hint to password handy Do use shocking phrases Do use two or more words that have substitution to make one word Do change the password often, like three times a year

Characters Alphabet, numbers #, $, %, ^, &, *, ?,, = a, A, at 3 = e, E 1 = l, L, I, I

Phrases Mnemonic –ImuKat = I’m a cat Memorable –Qbfjold* = Quick brown fox jumped over lazy dog Shocking –Uses emotion to remember –Contains grossly obscene, racist, extreme juxtaposition of ideas (running mollusks)

More Password Hints Transformation techniques –Interweaving of two words Iron horse = IhrOrnSe –Substitution of synonyms Coffee break = jaVa*rest –Substitution of antonyms Stoplight = starTdark

References Sarah Granger, “The simplest Security: A Guide to Better Password Practices”, Grady Ward, “Passphrase FAQ”, kl.de/~conrad/krypto/passphras-faq.html kl.de/~conrad/krypto/passphras-faq.html University of Michigan, “Password Security: A Guide for Students, Faculty, and Staff of the University of Michigan”,