Replying to Choosing An Extremely Secure Password - Examples

I use long passwords 12 to 16 characters. Also any letter that can be represented by a number such as an i can be a 1 or an e can be a 3 I replace the letter with the number. so for instance you could you the password cuddl3m0nst3r and add a number sequence at the end such as your fav number mixed with the month your mother was born. then it would end up being cuddl3m0nst3r702.

Oh the problem isn't picking the password, many people who "claim they have been hacked" have been known to just write it down somewhere in sight or give it to the first moron that claims he's from the company where said person has an account.

That's true though. Many people create very difficult password with all kinds of combination for hackers to crack it, and similarly, for themselves to remember it. So they have to write it somewhere or store it online. DON'T WRITE IT ANYWHERE. REMEMBER THEM.

Oh the problem isn't picking the password, many people who "claim they have been hacked" have been known to just write it down somewhere in sight or give it to the first moron that claims he's from the company where said person has an account.

There is unfortunately no patch for human stupidity.

o.O Well, I think my passwords will be cracked fairly quickly. According to the article, the password Fgpyyih804423 in 160 seconds using the most basic rainbow tables. That's basic. So if the Extended table is used (containing non-alphanumeric symbols), then it's possible that every password can be hacked. Just goes to prove the point that one should never store important files on a computer, especially on the Internet. You never know when someone will nose their way into your stuff.

Good thing for most of us that (1) Ophcrack is huge in file size, so most will not be downloading/installing it any time soon and (2) there really isn't a reason for random people to hack into most of our accounts - we aren't really famous/powerful people after all to attract the attention of evil crackers. I think. xP

Serena

For all my passwords, they're 20+ letters and numbers, they're really easy to remember, because it's my student ID number on my school card, and my password. It Ophcrack can crack that password can be cracked in 160 seconds... mine would only take like 5 minutes. Maybe I should make some capitals.

Good way to do a password, but it can do easily manually. To make very secure password I put some capital letters and if the server doesnt deny i put some characters out of alphanumeric

The multi-platform password cracker Ophcrack is incredibly fast. How fast? It can crack the password "Fgpyyih804423" in 160 seconds. Most people would consider that password fairly secure.

Article "Fgpyyih804423 in 160 seconds. How Safe is Your Windows Password?":
http://www.codinghor...ves/000949.html

my password (my newest one, basically my habbo one cos i dont wanna get hacked) it really good.
no one will ever guess it, probably cos theyre too SMART, lol, its also funny.

Yeah, I have an insecure password that I use to sign up to things I don't entirely trust, a relatively secure thing that i use to sign up to most things that aren't crucially important, and a very secure password for important things.

Arbitrary, I do passes simpler.

1. Simple/unimportant: On forums I rarely use, very unlikely to get hacked things or my nicksev passes. They're simple phrases, names, and other things. I use them a lot also.
2. Email and unknown things: I use a password like delldimsension350 or something that is right in front of me, that is long and not guessable. This is for mid-level things. I change it every 3-5 months. I have even used phone numbers and family members SSNs.
3. Secure/Critical: These are the most important, I never use the same password. I use thee types on my dedicated server, my IRC shells and my virtual host. These are things that I can't really recover and that are critical and literally are risking financial investments. Examples are:
gfyh546klhdflghl56hlkhdgflhdli5hlhdrlkghrdk5l6hklhgldfh56ilhldkghfldk56htklhh
Impossible to guess and hard to brute-force. I store these in a file some where on my local disk, obscure (example not with a name like passwords.txt).

Thats my recommendation to anyone else, but even the best password is vulnerable to humans. I've got so many passes just by good ol' SE.

Another note, daniel666 said his password has never been hacked, he's wrong. He gave me it once (I posted a thread on astahost about not giving out pases using his hacked account).

Also I don't recommend using &;"',<> in passwords that link to mysql, as they might be filtered. Same with space.