Do I really need a password like this?

Users Who Are Viewing This Thread (Total: 1, Members: 0, Guests: 1)

BeanAnimal

2500 Club Member
View Badges
Joined
Jul 16, 2009
Messages
3,183
Reaction score
4,819
Rating - 0%
0   0   0
It depends on what the site that has the password is.
Does it have any valuable information stored? Credit card info, etc?
If it's just a forum... yes, it's excessive.

But.

Use a password manager (I use LastPass, and can recommend it), and use it for everything. It will make a password as complicated as the site needs, and all you need to do is remember the main password manager password. I use it for everything that needs a password, except super high-risk things like my bank login. For those, I have my own, strong, complex password.

--Gray
It is a patently ridiculous way to enforce password complexity, regardless of the data being protected.
 

BeanAnimal

2500 Club Member
View Badges
Joined
Jul 16, 2009
Messages
3,183
Reaction score
4,819
Rating - 0%
0   0   0
My passwords are not intelligible.
I create passwords by turning my keyboard upside down and randomly typing at least 12 characters.
I will then choose various letters and capitalize them and add the special character if needed.
Of course this is only for sites and systems that must be secure.
The rest I have a generic PW.
why be so hard on yourself?
Dog9Trees7Red! Has more entropy than your 12 random characters and can be easily remembered.

Choosing words based on context makes them easy to remember.
Your online banking password for example.
Your bank is brick it has an elm tree in the yard and is in next to a donut shop 3 miles from your house.
Brick3GlazedElm!

or you drive by a farm on the way to work It has 2 barns
your email password
GoatJumpsNearBarn2

easy to remember even if you forget and has nothing to do with your life, social media or any other mineable attribute

skip the character replacements too… any hacking algorithm will try them all, including l33t speek and other common shorthand. All they do is make it hard for you to type and rememner.

password is the same as pa55w0rd or pa$$word or pa44w0rd, etc.
 
Last edited:

BeanAnimal

2500 Club Member
View Badges
Joined
Jul 16, 2009
Messages
3,183
Reaction score
4,819
Rating - 0%
0   0   0
It depends on what the site that has the password is.
Does it have any valuable information stored? Credit card info, etc?
If it's just a forum... yes, it's excessive.

But.

Use a password manager (I use LastPass, and can recommend it), and use it for everything. It will make a password as complicated as the site needs, and all you need to do is remember the main password manager password. I use it for everything that needs a password, except super high-risk things like my bank login. For those, I have my own, strong, complex password.

--Gray
except LastPass was hacked several months ago where user data was stolen, both encrypted and unencrypted and user secrets may have been exposed.
 

Reefing threads: Do you wear gear from reef brands?

  • I wear reef gear everywhere.

    Votes: 18 13.8%
  • I wear reef gear primarily at fish events and my LFS.

    Votes: 9 6.9%
  • I wear reef gear primarily for water changes and tank maintenance.

    Votes: 1 0.8%
  • I wear reef gear primarily to relax where I live.

    Votes: 19 14.6%
  • I don’t wear gear from reef brands.

    Votes: 74 56.9%
  • Other.

    Votes: 9 6.9%
Back
Top