Chapter 4. Workstation Security

31

4.3.1. Creating Strong Passwords

When creating a password, it is a good idea to follow these guidelines:

Do Not Do the Following:

Do Not Use Only Words or Numbers   You should never use solely numbers or words in a

password.

Some examples include the following:

8675309

juan

hackme

Do Not Use Recognizable Words   Words such as proper names, dictionary words, or even

terms from television shows or novels should be avoided, even if they are bookended with

numbers.

john1

DS 9

mentat123

Do Not Use Words in Foreign Languages   Password cracking programs often check against

word lists that encompass dictionaries of many languages. Relying on foreign languages for

secure passwords is of little use.

Some examples include the following:

cheguevara

bienvenido1

1dumbKopf

Do Not Use Hacker Terminology   If you think you are elite because you use hacker termi 

nology   also called l337 (LEET) speak   in your password, think again. Many word lists

include LEET speak.

Some examples include the following:

H4X0R

1337

Do Not Use Personal Information   Steer clear of personal information. If the attacker knows

who you are, they will have an easier time figuring out your password if it includes information

such as:

Your name

The names of pets

The names of family members

Any birth dates

Your phone number or zip code