Security: Passphrases & Passwords - GROK Knowledge Base (2024)

Security: Passphrases & Passwords

Favorite Article Print Article


A passwordisa common form of authentication and isoften the only barrier between you and your personal information. There are several tools that attackers use to assist in guessing or cracking a password. By creating a complex passwordand keeping it confidential, you make it more difficult for hackers to gainunauthorized accessto your information.Why do I need a Password?

Advice on Choosing aPassword

Secureand complexpasswords are often thought of as burdensome. With required 15-character minimum length, use of upper & lower case letters, and theuse of a number or special character, this can often seem like too much to remember. Thankfully, there is an easier way... you can enter apassphrase. A phrase meets the requirements on length and complexity, but it is easier toremember.

For some ideas on comingup with a passphrase, consider the following examples:
  • "Tiger123"
    • This password is short and easy for you to remember.It is important to realize, this password would also be easy tofigureout orguess.This is an example of a VERY insecure password.
  • "T1g3rudhxn!vo?LSU"
    • This password is much more complex, but also much harder to remember.
  • "Aren't tigers awesome and number 1 in the nation?"
    • This passphrase is long, complex, and easierto remember than the previous example.
DONOT USE ANYof thePasswords ORPassphrasesused as examplesin this articleforYOUR ACTUAL PASSWORD!

Remember a Complex Password

Full sentences andphrases are VERY secure because of the complexity and multiple waysin which they can be constructed. There are many ways "Aren't tigers awesome and number 1 in the nation?"could be written. As a result, it is more difficult for attackers to guess and it is harder for password cracking tools todecipher.

LSU passwordsCANcontain spaces, making apassphrase an ideal solution.

Question:

I try to keep my passwords in syncor similar to each other to make it easier to remember them. It is difficult to do thiswith such HIGH password requirements.

How should I handle the password for the other web services that I use? For example, passwords for otherweb services thatDO NOTallow spaces or have a very short maximum length.

Answer:
APassphrasecan be a viable solution by using abbreviations. Consider the following examples:
  • "Where oh where has my little 1 gone?"
    • This passphrase may be too LONGfor many web sites orwebservices.
  • "Wowhml1g?"
    • This abbreviated version of the previous password is now much shorter.It appears random and is difficult to guess, howeverit is easier for you to remember since you know the phrase that it originates from.

Steps to ChangeYour Password

Change Your MyLSU AccountPassword

Referenced from: Microsoft.com

16865
10/13/2023 3:20:37 PM

We love feedback! Please Help us improve this article.

GROK is a resource of Louisiana State University developed and maintained with support of the LSU Student Technology Fee.We love getting feedback from the general public, but our support efforts are generally dedicated to the LSU community.Thanks for your understanding!

Security: Passphrases & Passwords - GROK Knowledge Base (2024)

FAQs

Security: Passphrases & Passwords - GROK Knowledge Base? ›

A passphrase, as opposed to a password, is a phrase or short combination of words that is easy for the user to remember, and may contain spaces. Passwords are often shorter, do not include spaces, and consist of a random string of characters, or one or two words.

What are the best practices for passphrases and passwords? ›

CREATE COMPLEX PASSWORDS

A password made up of lowercase and uppercase letters, as well as numbers and special characters, is more complex than a password of only lowercase letters. You can also think up a phrase and then use the first letters of each word to create a complex password that is more memorable.

What is an example of a secure passphrase? ›

The key to a good passphrase is randomness — the words you use to create a passphrase should not have an obvious connection between them. A good passphrase example is overripe-trekker-angular-envision-letter, while a passphrase like apple-peach-banana-cucumber would be much easier to crack.

How to generate a secure passphrase? ›

Choose a memorable quote or phrase and use only the first letter from each word. Vary the capitalization. Also include numbers and symbols, either as substitutions for letters or as a replacement for a full word.

What is passphrase in information security? ›

A passphrase is a sentencelike string of words used for authentication that is longer than a traditional password, easy to remember and difficult to crack. Typical passwords range, on average, from eight to 16 characters, while passphrases can reach up to 100 characters or more.

Are passphrases really more secure than passwords? ›

Passphrases are difficult to crack through brute force. Many password-cracking tools work to break down 10-character passwords. Since passphrases are longer, they can be much more secure and safe from these tools. Passwords are easily hacked by password-cracking tools and robots as well as by humans.

Are passphrases more secure than passwords? ›

In fact, passphrases are so much better at securing accounts that both the FBI and the National Institute of Standards and Technology (NIST) officially suggest using passphrases over passwords as length has become much a much more influential factor in password security than just complexity.

What is a strong passphrase? ›

A strong passphrase contains a combination of different types of characters, such as uppercase and lowercase letters, numbers, and symbols. Still, you can make your passphrase even stronger by following some of the same rules from when you learned how to create a strong password.

What is an example of a 12 character passphrase? ›

To make sure your online accounts are as secure as possible it is recommended to use strong and complex passwords. An example of this could be a 12-character password such as: “i@Qf&6_XUEyC, 7-Sx;G49J$r, m#NZy2P]” and so on.

Is a 3 word passphrase secure? ›

Why does the NCSC recommend using 'three random words' as a way to create passwords? By using a password that's made up of three random words, you're creating a password that will be 'strong enough' to keep the criminals out, but easy enough for you to remember.

What is an example of a master password? ›

Instead of trying to create a new and complex password, choose a memorable phrase and use the first letter of each word. For example, you could use the phrase, “I love my dog.” and add some numbers and symbols, so the password would look like “Ilmd. 100%” Avoid common words because a common word is easier to crack.

Can you use a passphrase as a password? ›

Most passcode rules and security standards allow for the use of passphrases instead of passwords. On the whole, using a passphrase is more secure and offers better peace of mind. In either case, the FBI recommends making passwords or passphrases as long as a system will allow for optimal security.

What is the best strong password? ›

A strong password is: At least 12 characters long but 14 or more is better. A combination of uppercase letters, lowercase letters, numbers, and symbols.

How do I find my security key or passphrase? ›

Most routers come with the network key written on the back or bottom of the router. It's usually labeled with a different name, such as passcode, password, wireless password, or simply security key. The underside of a router showing the Wi-Fi password (network security key).

What is the difference between a passphrase and a password? ›

Answer. A password is a short character set of mixed digits. A passphrase is a longer string of text that makes up a phrase or sentence.

What does a passphrase look like? ›

A passphrase is a sequence of four or more words, with each word in the phrase having four or more letters. Spaces aren't necessary, so you can have a passphrase that looks like table chair book candle or tablechairbookcandle. In function, passphrases are the same as passwords, but they differ in important ways.

What are four 4 best practices for passwords? ›

Password Best Practices
  • Never reveal your passwords to others. ...
  • Use different passwords for different accounts. ...
  • Use multi-factor authentication (MFA). ...
  • Length trumps complexity. ...
  • Make passwords that are hard to guess but easy to remember.
  • Complexity still counts. ...
  • Use a password manager.

What are three 3 best practices for creating and using passwords? ›

Create strong passwords
  • At least 12 characters long but 14 or more is better.
  • A combination of uppercase letters, lowercase letters, numbers, and symbols.
  • Not a word that can be found in a dictionary or the name of a person, character, product, or organization.
  • Significantly different from your previous passwords.

What is the best security practice for storing passwords? ›

Hashing and encryption can keep sensitive data safe, but in almost all circ*mstances, passwords should be hashed, NOT encrypted. Because hashing is a one-way function (i.e., it is impossible to "decrypt" a hash and obtain the original plaintext value), it is the most appropriate approach for password validation.

What are two reasons that a passphrase is recommended instead of a password? ›

Passphrases are easier to remember than a random of symbols and letters combined together. It would be easier to remember a phrase from your favorite song or your favorite quotation than to remember a short but complicated password. Passwords are relatively easy to guess or crack by both human and robots.

Top Articles
Latest Posts
Article information

Author: Rueben Jacobs

Last Updated:

Views: 5591

Rating: 4.7 / 5 (57 voted)

Reviews: 80% of readers found this page helpful

Author information

Name: Rueben Jacobs

Birthday: 1999-03-14

Address: 951 Caterina Walk, Schambergerside, CA 67667-0896

Phone: +6881806848632

Job: Internal Education Planner

Hobby: Candle making, Cabaret, Poi, Gambling, Rock climbing, Wood carving, Computer programming

Introduction: My name is Rueben Jacobs, I am a cooperative, beautiful, kind, comfortable, glamorous, open, magnificent person who loves writing and wants to share my knowledge and understanding with you.