How to make better passwords

[Chuckt]

In today’s online and connected world, passwords are a painful but necessary part of life. As an I.T. professional, I see someone almost every day that’s frustrated by some kind of password problem. I see many people who just don’t understand good passwords and have no concept of how to make them easy and secure. A little understanding and planning prior to being asked to select a password can alleviate some of the frustration that leads to weak and unsafe passwords.

How to Make Your Passwords Not Suck
http://www.techunboxed.com/2012/03/how- ... .html#more

How Big is your Haystack?
https://www.grc.com/haystack.htm

I entered in one of my passwords on this site and found that it could be broken in 1.5 years or 13.54 hours using a massive cracking scenario.

[bitfogav]

Interesting read there chuckt..

I was working on a visual basic project awhile ago that needed the "user" to make a password account to be able to login, I needed a way of storing the user login and passwords and I done this by storing the login/passwords in a folder/.txt file.. Now your probably thinking thats not safe at all? ok this wasn't a commercial project it was just for a small group of users?.

I used a few hash decrypters MD5 and sha256 and wrote an algorithm which basically encrypted the login/passwords into my own hash decrypter, and then just reversed the process which decrypted the login/password when the user tried to login with the correct user/password..

So if we took the user name Gavin, that would create a folder name:
5efd69d339b158c9bb63eae31e569e7d

and within that folder we had a .txt file with a name of "ebc701ff80c1100b8aff67e873005212.txt"

and within that .txt file would be the password for example "bradsprojects":
password = e35dd68eea5371efff898e427466de0f

So basically the point here is even if the user could access the folder, they wouldn't even know that it was a user/password folder, and trying to decrypt it would have been hard without knowing my decryption algorithm. anyway I just thought I would share that with you..

[Chuckt]

Interesting read there chuckt..

It is always good to re-evaluate the security you have. You might want to test (examine) yours (legally):

All your passwords belong to us
http://www.zdnet.com/all-your-passwords ... 000020033/