How long is long enough?

[Lyte]

Passwords I mean! How long are your passwords??? Do you use just letters? Just numbers? A combo? Do you use upper and lower case letters??

Let's hear from y'all and then I'll add my two cents.

Lyte

[firestorm]

Depends on what I use the pass for depends on the length and complexity of it. On a few online games that I play I use a mixture of letters and #'s, something that makes sense to me. On email, I use lower/upper case, #'s, and try to keep them fairly long. Even a simple password won't normally get hacked, but the longer they are the harder they are to crack, even with automative programs(factorials will tell you the chances). Just all on how important you think your information is. Looking forward to others replies...

[Lyte]

Okay, here's my experience.... I use letters AND numbers AND capitalization AND lower case! :eek: So much so that sometimes, I have to write down my passwords on a log (off the computer) because I forget exactly how I used a particular quote. For example...

I had an ex-military intelligence friend who used phrases like ... Once more unto the breach, dear friends... from Shakespear's Henry V. Then he'd alter the case (UPPER/lower) and add a few numbers to boot. He says this is what he was taught to do in the military so I started doing the same. I have no trouble remembering the quotes but I sometimes forget which part I made UPPER/lower and or what numbers I've added! :p

Lyte

[Mere]

lol i use both captial/lower case letters, numbers and the special characters ($#&!)

for an example like

w!5X9d&2b@

of course, i had to write something like that down because there was no way i would remember all that!

[McDaddy]

my thoughts are keep it simple. i just use a regular password. no numbers if i dont have to and all the same case. the only thing i will do is mis-spell it. it keeps it simple and easy to remember.

the reason i do this is it keeps it easy for me. and i am the one tyring it all the time. second, not just any person is going to guess what word i used for my password and which letter or letters i mispelled, and third, if they really wany to get in to my computer, a litt password is not going to stop them., some one can use program to figure it out. so they are going to get in if they really want to.

so i just keep it easy and simple for me

[nogard]

Well being that I got to a few security forums and see people saying that someone else go into an account. So to answer the question, there isn't a too long. Me I use numbers and numbers. I use a password generator and a password keeping program called password keeper. I never have to remober my passwords, I just use the program and have 1 password for that. My password keeper dat file isn't even on my vomputer. I have 3 on different floopies. I have the dat on 3 floppies just to be safe. If on floppy dies I have the other. Oh yeah I also for got I have my dat encrypted and put in a safe place other than the floppies. WOW after read this, I look kind of paranoid. LOL

[Lyte]

Originally Posted by nogard

WOW after read this, I look kind of paranoid. LOL

Hey.. now a days you can't be TOO careful! :eek:

Lyte

[nogard]

LOL... I know, I seen lot of people saying "someone" got into their online back account" and when I ask them "what password they used" then they say "my birthdate" or "my last name". I advise them to change to letters and numbers.

[OulZac]

As someone who has to deal with this kind of issue on a daily basis (hosting/network), I would say, its not always the length, but how its compiled.
I always tell people make sure its over 8 characters, but I would prefer you make it atleast 12. Also, never use a password that is your username for anything.

Also never use plain text,

mylifeisfun

Mix it up like lyte said,

myly4f2f8n

and then throw in the CAPS,

mYLy4f2F8n

and then add symbols,

mY$y4f&F8n

I tell people this NOT because its MORE secure, but it makes it more of a pain to "hack".
When it comes to passwords, if your not using them on a secure socket layer connection (SSL) then any password can be "stolen".

And if the password is not to be used over a network connection, then it really doesn't matter, as how many people are really going to have access to attempt to guess it

[Lyte]

Originally Posted by oulzac

I tell people this NOT because its MORE secure, but it makes it more of a pain to "hack".

You're right on that score! Like most criminals, hackers want the quick and easy score. It just makes little sense to spend a lot of time on one well protected account or computer when there are thousands of easier ones to exploit.

Lyte

[Rosetta]

I use a random sequence of letters and numbers, both capital and lowercase. Of course I have to write them down seperately, but that's better than say, someone hacking into your Paypal account.

A friend of mine has the most ingenious method, though. She writes uncommon words backwards and in 1337 speak.

[Lyte]

Originally Posted by Rosetta

A friend of mine has the most ingenious method, though. She writes uncommon words backwards and in 1337 speak.

Okay, I'll bite... what's "1337 speak?"

Lyte

[OulZac]

Originally Posted by Lyte

Okay, I'll bite... what's "1337 speak?"
Lyte

Hacker "Sp33k" for leet, or elite. Originating from 31337 "eleet", the UDP port used by Dead Cow Cult, a hacker group, to access Windows 95 using Back Orifice, a notorious hacking program.

1337 is the language of "hackers" and newbies across the internet. Also, the words in 1337 are usually short(ie "are" becomes "r") and intentionally spelt wrong(ie "the" becomes "teh", this is most common with e switching places and o's becoming p's), A language in which numbers and symbols are put together to look like letters.



A language in which numbers and symbols are put together to look like letters. Some people create their own 1337 letters and it makes them look more 1337 by fellow 1337-speakers. Here is an alphabet of 1337 letters I know and have created:

A: 4 or l\ or ^ or @ or /\ or /-\
B. l3 or 8 or ß or ]3 or l:
C: ( or < or © or ¢
D: l) or l> or ])
E:3 or £
F: l= or # or ƒ
G:6 or 9
H: # or l-l or (-) or !-! or }-{ or }{ or l+l or )+( or !+! or }+{
L: 1 or ! or ][
J: _l or _/
K: l< or l( or l{ or l<=
L: l_ or ! or 1
M: l\/l or /\/\ or l\l\ or ^^
N: l/l or /\/
O: 0 or () or <> or * or ø or Ó or °
P: l* or l> or |D or l^ or l+
Q:& or (\) or ¶
R: l2 or ®
S: 5 or $ or §
T:+ or 7
U: l_l or /_/
V: \/
W:|/\| or \/\/ or |/\/ or \/\|
X: >< or }{ or :-:
Y: ¥
Z: 2

Common mispellings:
the = teh
that = taht
take = taek
own = pwn
you = joo
dude = jood

common phonetic replacements(always used in true 1337):
f = ph
ck == xx
there is no 'F' in true 1337, it is replaced by the 'ph' phonetic in true 1337

I will leave my personal comments at the door on this one!

[Lyte]

Ohh!! Okay, I've seen this type/print before but I didn't know it was called "1337." Interesting! Good to know... thanks!

Lyte

[nogard]

I wouldn't use 7337 as my passwords. Hackers know it.