Choosing a Secure password.
Posted by: Wael Nasreddine in Linux Security, TIP, tags: password, securityIt’s very important, when you are choosing an important password, to choose it well, always mix letters ( lower AND upper ), numbers and characters… A week password can be guessed via dictionary attack, like `home` or `computer` etc… A strong password can never be guessed via dictionary attack, ex: `]RmXpEB=1&` or `rl*~V3nM"S` …
I agree that random passwords are very hard to remember, but it’s better safe than sorry right ? Anyway you might think I thought of that password, well guess again
To generate a random, yet powerful, password I use apg it’s a small program that generates passwords, you can request both pronounceable and random passwords.. here some examples:
Generate an 8 to 10 chars long, pronounceable passwords
$ apg -a 0 -m 8 -x 10
Dabfiecaf
cebfaysHey
hivjebDoj
Kaneisht2
FiwauHyk
NiwryinkEp
Generate 15, 5 to 10 chars long, random passwords
$ apg -a 1 -m 5 -x 10 -n 15
y=/y}Ue
U^hV;DX
Y|'q@PWU}
Iz?J[M\{:
z0)g(3?bR[
W3'(PQ}8.
/]eb:]VkU
num)bQ
|q&Z6:)d5
I()jhl?I
0′[Pc1″<4
e1,`L”
WAU\
Password Strength
To check the strengh of your password, you can use Password checker by Microsoft.com or this small Java program
Good Luck





Entries (RSS)
Recently I discovered that mathematicaly, 8 character length password generated from all printable ascii characters is as strong as 11 character length password of only 26 lowercase latin letters.
94^8 == 26^12Problem is, that rainbow tables exists for alphanumeric passwords of up to 15 characters for weak hash systems. Therefore, I use something like ‘blackcarpenterissillyx’ (22 chars). No dictionary attacks, no bruteforce, no rainbows, *easy to remember*! Add some additional ascii characters to further improve quality. No need to have those z0)g(3?bR[…
check this out…
this is mine…