Securing Your Accounts With Well-Crafted Passwords

In the past I've never really paid much attention to security issues when it comes to user names and passwords. Frankly I figured it was all a lot of overblown hype. This led to an unfortunate incident that involved my website being attacked, apparently by a skillful youth with a propensity for mischief.

The main security flaw with my website was probably the simple fact that the username and password were exactly the same. Granted I did realize that this wasn't highly intelligent but I didn't have the power to change it myself, and I didn't think it really mattered enough to bother about it. Having an identical username and password is a massive "no-no" in computer security. Your username and password should not even be related along the same line of thought. A username of "Dragon" and a password of "Fire" is not a secure combination.

For maximum security, passwords should not be cohesive words or phrases and should not be too obviously related to something like your birthday or the birthday of someone close to you. Personal information is one of the first things used when people attempt to break passwords. Having a password of "Password" is indeed humorous and ironic but it is not in the least bit secure.

A "brute force" password hacking technique involves using certain rules and guidelines to take a guess at possible passwords and generally works through a dictionary of sorts, trying combinations of possible words and common characters. Your best bet at creating a secure password is to pick a random collection of letters, numbers, and symbols, including varying case changes (in a password the letter "a" is not the same as the letter "A", so alternating at random between upper and lower case will increase the difficulty encountered in cracking your password). Selecting a sequence of characters on the keyboard (such as "asdf" or, worse, "1234") definitely does not create a secure, random password.

Having symbols in your password is an easy way to greatly increase security. These are the special characters accessed by holding the "Shift" key and pressing one of the numbers at the top of the keyboard. If you want to truly expand your arsenal of special characters, try holding down the "alt" key and pressing a combination of numbers on the num pad (the rectangular collection of numbers on the right hand side of most keyboards) then release "alt". For example, holding "alt" and pressing numbers, 1 then 6 then 8 and releasing "alt" will give the character "¿". Most combinations of 3 numbers will enter a different symbol into your password. This may make it a little harder to enter your password but it makes it a lot harder for anyone else to crack it.

To make passwords easier to remember you can use something original, like the name of your favorite character in a book (personal information that other people won't know). Then add some numbers to it, perhaps use the "Leet speak" (check http://en.wikipedia.org/wiki/Leet for exact definition) method of changing letters to numbers and generally mix things up so that to you it seems coherent and memorable but to an automated pattern recognizer it seems random. For example, "jAm35_5m1Th¿" ("James Smith") is actually surprisingly secure. In this case the password's meaning is obvious to a human reader but it will take a lot of work for them to divine the password without prior knowledge (unless you've used your name or a close relative/friend's name which, as we've already discussed, is not a good idea).

For additional security you should not use the one user name and password for every account that you have. If you do and someone manages to get hold of your details for one site they pretty much have the run of your digital life. It is not particularly vital to have perfect passwords for less important accounts (e.g. web based email from Hotmail, forums you visit etc.). These sites can quite happily be accessed using the same password. However, bank accounts, work email etc. should be made as secure as possible.

Hopefully a few of these tips will assist you in making your online activities more secure. Keep these guidelines in mind, change your password on a semi regular basis, and with any luck you'll be able to avoid the hacking menace that befell me.

Daniel Punch
M6.Net Web Helpers
http://www.m6.net

Voice of America

Before the Games Begin, He Has Moves to Make New York Times, United States - 1 hour ago Coverage of the 2008 Beijing Games from every angle — the politics, the arts, the culture and the competition. In 1995 a fellowship from the Louis-Nikolais ... China will hold Olympics on its own terms CNN 2008 Beijing Games - Presence of Bush and (probably) Sarkozy at ... Canada NewsWire (press release) President Bush To Attend Olympic Games AHN The Spoof (satire) - Globe and Mail all 837 news articles

ABC News

US swimmer looks set for Beijing Games -- at age 41 Canada.com, Canada - 15 hours ago It would be her fifth Olympics, and she would be the oldest female swimmer to compete at the Games. "I was very anxious, very nervous," Torres said after ... Dara Torres Qualifies For 5th Olympic Games HULIQ (press release) Torres Shows the Young How It's Done ABC News Olympics Questions, the Sequel New York Times DetNews.com - MSNBC all 283 news articles

BYU's McAdams qualifies for Beijing Games Salt Lake Tribune, United States - 3 hours ago By Michael Lewis Posted: 4:12 PM- EUGENE, Ore. - Provo's Josh McAdams qualified for the Beijing Olympics today, finishing third in the men's steeplechase at ... Famiglietti wins steeplechase in time of 8:20.24 The Associated Press McAdams makes Olympic team The Plain Dealer - cleveland.com all 76 news articles

Hoff wins again, claims 6th race in Beijing Games The Associated Press - 1 hour ago OMAHA, Neb. (AP) — Katie Hoff has claimed a fifth individual race in Beijing by winning the 800-meter freestyle at the US Olympic swimming trials. ...

Los Angeles Times

Gymnast Hamm could miss Games after failing test guardian.co.uk, UK - Jul 4, 2008 The 25-year-old, who won a silver medal in the team competition in the Athens Games, has been issued a warning by the United States Anti-Doping Agency ... Olympic Buzz Kansas City Star all 324 news articles

National Post

A's place Crosby on disabled list; recall Petit from Sacramento MLB.com - 6 hours ago Petit joins the A's for the second time this year as he hit .333 in 10 games during his first stint from May 16 to June 19 when he made his Major League ... Athletics place SS Crosby on DL National Post Bobby Crosby: Sidelined by Strained Hamstring Rotowire Bobby Crosby latest to go on disabled list for Oakland Athletics The Canadian Press MLB.com all 61 news articles

Washington Post

Drones to patrol skies during Beijing Olympics Games Times of India, India - Jul 4, 2008 The remote-controlled craft will patrol the skies over the eastern Chinese city of Qingdao, where sailing events will be held during the August 8-24 Games, ... Video: Algae Chokes Bay That Will Host Olympic Sailing AssociatedPress Inside China: Beijing changes its spitting image Independent Slingsby's green and gold Games Central Coast Express Advocate The Age - AsiaNews.it all 849 news articles

TSN.ca

Pittsburgh Penguins sign forward Matt Cooke to replace Jarkko Ruutu The Canadian Press, PITTSBURGH - 1 hour ago The five-foot-11, 205-pound Cooke had 10 goals, 13 assists and 91 penalty minutes in 78 games with the Vancouver Canucks and Washington Capitals last season ... Penguins Sign Matt Cooke NHL.com Penguins add forward Matt Cooke CBC.ca all 88 news articles

Williams wins high jump, Gay pulls up lame in 200m Canada.com, Canada - 2 hours ago Eugene, OR (Sports Network) - Jesse Williams earned his first trip to the Olympic Games by winning the men's high jump competition Saturday at the US Track ...

Mind Games Remembering Brainwashing New York Times, United States - 3 hours ago By TIM WEINER IT was a time of secrecy and fear. Fear of a strange enemy driven by an alien ideology, killing Americans abroad, threatening Americans at ...