Password Patterns
The password "Password.1" is technically a strong password, however that is a password that JtR would be able to crack with ease. Today in Lifehacker I read a great article about passwords.
Remember, more systems fell due to weak passwords than exploits.
From Lifehacker:
Most people, though, use the same patterns when choosing their passwords, like having the number 1 at the end, making these easier for hackers to crack.
Security expert Roger Grimes writes at InfoWorld how easily passwords can be guessed and says that these days passwords need to be longer than the mere six-to-eight characters typically used. The average password guesser can determine portions of a large majority of users' passwords:
Most professional password guessers know there is a 50 percent chance that a user's password will contain one or more vowels. If it contains a number, it will usually be a 1 or a 2, and it will be at the end. If it contains a capital letter, it will be at the beginning, followed by a vowel. The average person has a working vocabulary of 50,000 to 150,000 words, and they are likely to be used in the password. Women are famous for using personal names in their passwords, and men opt for their hobbies. "Tigergolf" is not as unique as CEOs think. Even if you use a symbol, an attacker knows which are most likely to appear: ~, !, @, #, $, %, &, and ?.
http://lifehacker.com/5800346/what-professional-password-guessers-look-for-in-your-password
Reader Comments