{"id":3303,"date":"2010-01-01T15:28:09","date_gmt":"2010-01-01T23:28:09","guid":{"rendered":"http:\/\/lee.org\/blog\/?p=3303"},"modified":"2012-06-20T20:26:37","modified_gmt":"2012-06-21T03:26:37","slug":"passwords-that-are-easy-to-remember-and-hard-to-guess","status":"publish","type":"post","link":"https:\/\/www.lee.org\/blog\/2010\/01\/01\/passwords-that-are-easy-to-remember-and-hard-to-guess\/","title":{"rendered":"Passwords That are Easy to Remember and Hard to Guess"},"content":{"rendered":"<p>I wrote this little guide for my aunt. Her email password got hacked a while back. If you don&#8217;t currently do something similar, you should!<\/p>\n<p>First, here is <strong>how to make a bad password<\/strong> that will get hacked:<\/p>\n<ul>\n<li>Use a word that is in the dictionary, even if you r3place s0me l3tt3rs w1th number5 (that&#8217;s an old trick) or&#8230;<\/li>\n<li>add a 1number1 to a 3word3 (that&#8217;s an old one too)<\/li>\n<li>Make your password a too common phrase like your favorite band, &#8220;Flock of Seagulls&#8221;, or your birthday &#8220;2\/2\/1980&#8221;. There aren&#8217;t enough 80&#8217;s New Wave bands or birthdays to fool a brute force attack on your password.\n<\/ul>\n<p>Now here is <strong>how to make a good password that is easy to remember and won&#8217;t get hacked<\/strong>:<\/p>\n<p>Change all your passwords to follow a pattern. Make the pattern something you can easily figure out but a password thief could never do.<\/p>\n<ol>\n<li>Start with a basic password that is something you like, but misspell it. For example, &#8220;<a href=\"http:\/\/lee.org\/recipes\/Cappelletti\">caps<\/a>&#8221; to &#8220;kaps&#8221;.<\/li>\n<li>Change it so that it has a capital letter, a number and punctuation. For example, &#8220;Kaps^2&#8221;.<\/li>\n<li>For every website you go to, prepend part of the website name to the new password. For example, maybe use the first 2 letters and the last letter of the site. You&#8217;d get &#8220;<strong>amn<\/strong>&#8221; out of  \u00a0<strong>am<\/strong>azo<strong>n<\/strong>.com. So your password for Amazon.com would be &#8220;amnKaps^2&#8221; and your password for Bank of America would be &#8220;baaKaps^2&#8221;.<\/li>\n<\/ol>\n<p>That&#8217;s it!<\/p>\n<p>Your final password should be between 9 and 12 characters. (some websites stupidly limit the length of your password, and you don&#8217;t want to have to use a different strategy on those sites, lest it be harder to remember.<\/p>\n<p>You now have a <strong>REALLY GOOD PASSWORD<\/strong> that is <strong>REALLY EASY TO REMEMBER<\/strong> and <strong>REALLY HARD TO GUESS<\/strong>. And it&#8217;s <strong>DIFFERENT ON EVERY SITE<\/strong> so when one website gets hacked, the bad people don&#8217;t know your password on other sites!<\/p>\n<p>&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8212;&#8211;<\/p>\n<p>If you have gmail, I <strong>strongly<\/strong> recommend you turn on 2-step verification.<br \/>\n<a href=\"http:\/\/googleblog.blogspot.com\/2011\/02\/advanced-sign-in-security-for-your.html\">How to enable it<\/a>.<br \/>\n<a href=\"https:\/\/support.google.com\/accounts\/bin\/answer.py?hl=en&#038;topic=1056283&#038;answer=180744&#038;rd=1\">A friendly video that walks you through it.<\/a><\/p>\n<p>Yes, it takes a little effort, but so does locking your front door when you go out.<\/p>\n<p>Short story: last year I sat down at a public computer at City College. As I typed in my password, I got this chill, wondering if there might be a virus on the computer, sending my password off to some nefarious Russian hacker den or somesuch. So the first thing I did was enable 2-step verification.<br \/>\nFlash forward 3 months to <a href=\"http:\/\/abclocal.go.com\/kgo\/story?section=news\/local\/san_francisco&#038;id=8503743\">this ABC News article<\/a> that starts out &#8220;A computer virus found at the City College of San Francisco may have been part of an elaborate international scheme stealing students&#8217; personal information for more than a decade.&#8221;<\/p>\n<p>Yes, the bad people got my password. But my password strategy and 2-step verification protected me. <strong>Nuff said<\/strong>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>I wrote this little guide for my aunt. Her email password got hacked a while back. If you don&#8217;t currently do something similar, you should! First, here is how to make a bad password that will get hacked: Use a word that is in the dictionary, even if you r3place s0me l3tt3rs w1th number5 (that&#8217;s [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-3303","post","type-post","status-publish","format-standard","hentry","category-general"],"_links":{"self":[{"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/posts\/3303","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/comments?post=3303"}],"version-history":[{"count":1,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/posts\/3303\/revisions"}],"predecessor-version":[{"id":4462,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/posts\/3303\/revisions\/4462"}],"wp:attachment":[{"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/media?parent=3303"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/categories?post=3303"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.lee.org\/blog\/wp-json\/wp\/v2\/tags?post=3303"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}