Passwords are nice things, because they allow nice people (like you and me) to keep our nice things away from bad people. However, like a lot of computer driven things, the password is only as good as you, the end user, make it.
It’s no surprise that most passwords people use to secure there email, Facebook and even there online banking tend to be simple facts about the person / or horribly lame attempts at making a password in the first place. So let’s talk a little bit about how secure your passwords are and how you can make them even more secure.
A password is based in a finite world, meaning that if someone had the time, they could quite possibly go through every possible combination and find your password (understanding that passwords in general tend to have rule. Example: your password needs to be between 8-16 characters long and needs at least one number). So it’s not difficult to see how it’s possible for the computers out there to mill through the billions of possibilities (and yes a billion is a lot but it’s still finite so no you are still not safe) and find the key to your personal information.
Also as computers become faster and faster, the power that the everyday “home hacker” also increases. Recently, researchers used pairs of graphics cards to break 8 digit passwords in about two hours. Not impressed well let’s think about it. In the English language we have 26 letters and 10 numbers (0-9). So with an 8 digit long password using 26 letters x 2 (accounts for upper and lower case) + 10 numbers is 62 possible characters. Obviously I am not counting all the crazy symbols you can put into your password like (!@#$%^&* etc……). Okay back to the math (the exciting part the reason why you read right?), with 62 possible characters and wanting passwords 8 characters long we can use a combination to find the number of possibilities:
 |
| The formula I used |
8,361,453,672 possibilities
Let that soak in for all those who think that you are safe in the world of “billions of possibilities”, that’s 8 billion plus possibilities that researchers cracked with graphics cards. 8 BILLION!!!!!!!!!!!!!! It just goes to show that you’re not as safe as you think you are. Add to that the fact that your everyday password is not something you grabbed from a random password generator (and if it is I apologize, you are a real trooper) and we are all kind of screwed. Luckily there are simple ways to keep your password safe.
- Use a longer password with both numbers and letters. Security experts now say that a password about 10-12 digits long is a good length. You can maximize the security by using upper and lower case characters.
- Make your password something unique, something only you would know. (and don’t worry if you are madly in love and your soul mate knows everything about you, your wrong they don’t know EVERYTHING so don’t be lazy).
- Make your password hints unique. A lot of websites allow you to recover your password by answering security questions etc… Making these questions difficult makes it difficult for people to crack them. Think about it, if you’re favorite movie is the Lion King and your password hint is “My favorite movie is…” and you constantly profess your love for Lion King on Facebook….get it?
- NEVER EVER GIVE YOUR PASSWORD TO ANYONE. A lot of people fall into this trap. If someone from Facebook emails you asking for your password to perform site maintenance etc…don’t buy into it. Facebook, Winthrop IT, Bank of America do not need your password to access your account or perform maintenance.
- Don’t save passwords on your computer, on a piece of paper or on your wallet. Your mind is the best place to keep your password, because its hard to loose your brain right. If your worried about the government kidnapping you to get access to your Flicker account…well you have bigger problems.
So be careful, learn more about the way your secure your online accounts and remember to be proactive.
Cheers,
--Devang