
According to the CEO of firm of network safety of FlowTraq Vincent Burke:
The majority of websites and the companies need passwords which contain a combination at least from 10 characters lower and an uppercase, at the same time include number and one or several special signs
Recently security experts recommend to increase password length in general to twelve signs. In their opinion 12 — a minimum. This theory was created on the basis of research which was conducted at Institute of technology (the State of Georgia, the USA). Researchers used groups of video cards to crack eight-digit passwords and came to a conclusion that for this purpose there are enough two-three hours. For cracking graphic processors — the system components developed for satisfaction of needs of modern gamers were involved.
Passwords from seven characters are qualified as "hopelessly inappropriate". The researchers dealing with data security issues came to conclusion that on cracking of passwords twelve characters with modern technologies will be left by about 17,000 years. However, technology development is so prompt that it is difficult to give exact forecasts.
Originality of the password
Certainly, not only one length does the password reliable. It should not be a lung for guessing or predictable. For example, the password of LadyGaga — is good only for the devoted admirer or for the singer. The set of digits 1234567890 will not go too — too obviously that even the child can crack it, keying in a row all ten digits. Also the combination from the password1234 series will be unreliable even if it consists of twelve characters.
It is worth thinking out difficult and not widespread passwords. It is better to avoid words which can be found in dictionaries of any language. Popular replacements of letters with numbers (0 instead of "o", 4 instead of "a") do not play a special role. It is not desirable to repeat the same password many times. Though it is also done by users, according to the November research RSA of 69%. Results showed that consumers reuse the password which is thought up by them once (while nearly 50% from them were the victims of attacks from hackers).
Most of experts in safety agree in opinion that passwords have to be easily memorable, but difficult guessed. Too difficult and unclear combinations from characters will simply be forgotten. And to write passwords on stickers, pieces of paper, in notepads or somewhere else — not the most successful idea. Here it will better be limited to the hint clear only to the owner, but not someone to another.
One of parameters doing the password more difficult consists in using really rigid constructions. It is unlikely someone will be able to remember a set of twenty signs, like GdzIQaZyVaFgbh7dlu46. Actually, quite "painfully" to use such passwords in general. On the other hand, they really will be difficult to be cracked. Similar passwords are good for the systems demanding special safety and which are not used often.
As the password it is possible to use the phrase, previously coding it. For example on English "I want to be at the beach" in the coding can look as iw2b@theBeach. The memorable password which will be rather difficult for cracking. Under each system it is possible to pick up the different termination. Some systems allow even to use complete the sentence as passwords. Such passwords will not be forgotten and will be quite reliable.
For the purpose of data security increase by the known cloudy data storage of Dropbox the list from passwords which are forbidden to be used was created. In the list there are about 85100 passwords.
And Youzhny's University of Wales conducted researches which results showed that:
4,7% of users use the password of password;
8,5% of users select one of two options: password or 123456;
9,8% of users select one of three options: password, 123456 or 12345678;
14% of users select one of 10 most popular passwords;
40% of users select one of 100 most popular passwords;
79% of users select one of 500 most popular passwords;
91% of users select one of 1 000 most pop