Guidelines for Creating a Strong
Password
To avoid making a poor choice and avoid
problems, kindly follow the following basic guidelines when creating your
password.
If you prefer,
you may use these excellent online random password generators
at:
Test
your password with a similar one you might use (do
NOT use the identical one) for
possible improvements
at...
http://www.securitystats.com/tools/password.php
If you prefer your own genius, please make sure that all the conditions
below are satisfied.
DO’s
- DO use a password with mixed-case letters. Use
uppercase letters throughout the password.
- DO use a password that contains alphanumeric
characters and include punctuation, where supported by the operating
system.
- DO use a password with mixed-case letters. Do not
just capitalize the first letter, but add uppercase letters throughout the
password.
- DO use at least eight characters, more characters
allows for better randomness.
- DO use a seemingly random selection of letters and
numbers.
- DO use a password that can be typed quickly, without
having to look at the keyboard. This makes it harder for someone to steal
your password by looking at your keyboard (also known as "shoulder
surfing").
- DO change passwords regularly. The more critical an
account to network integrity (such as root on a Unix host or Administrator
on Windows NT), the more frequently the password should be changed. This
change stops someone who has already compromised an account from continued
access.
DO NOT’s
- DO NOT use your first, middle or last name or anyone
else’s in any form.
- DO NOT use your initials or any nicknames you may
have or anyone else’s.
- DO NOT use a word contained in English or foreign
dictionaries, spelling lists, or other word lists and
abbreviations.
- DO NOT use other information easily obtained about
you. This includes pet names, license plate numbers, telephone numbers,
identification numbers, the brand of your automobile, the name of the
street you live on, and so on. Such passwords are very easily guessed by
someone who knows the user.
- DO NOT use a network login ID in any form (reversed,
capitalized, or doubled as a password).
- DO NOT use a password of all numbers, or a password
composed of alphabet characters. Mix numbers and letters.
- DO NOT use dates e.g., September, SEPT1999 or any
combination thereof.
- DO NOT use keyboard sequences, e.g.,
qwerty.
- DO NOT use a sample password, no matter how good,
that you’ve gotten from a book that discusses information and computer
security.
- DO NOT use any of the above things spelled
backwards, or in caps, or otherwise disguised.
- DO NOT write a password on sticky notes, desk
blotters, calendars, or store it online where it can be accessed by
others.
- DO NOT use an identical password or username anywhere.
- DO NOT reveal, or share your password with anyone.
Thank
you.