by

LESSON

CYSEC 107 What are secure passwords, and how can you create them?

listen to the answer

ANSWER

Secure passwords are a fundamental component of good cybersecurity hygiene. They act as the first line of defense in protecting your personal and professional data from unauthorized access. 

Here’s what makes a password secure and how you can create one:

Characteristics of Secure Passwords

Length: The longer the password, the better. A minimum of 12 characters is recommended because length increases the number of possible combinations, making the password harder to crack.

Complexity: A secure password includes a mix of uppercase letters, lowercase letters, numbers, and special characters such as @, #, $, etc. This complexity prevents attackers from easily guessing your password.

Unpredictability: Avoid common words, phrases, or easy-to-guess patterns like “12345” or “password.” Instead, use random combinations that don’t have any obvious association to you personally, like birthdays or anniversaries.

Uniqueness: Each account should have its own unique password. Reusing passwords across multiple sites increases the risk that if one site is compromised, others will be too.

How to Create Secure Passwords

  1. Use a Password Generator: These are tools designed to create complex and random passwords that are difficult to crack. They can instantly generate passwords that meet all the recommended security criteria.
  2. Develop a Personal Algorithm: Create a system for generating passwords that only you understand. For example, start with a base word, then customize it for each site or service based on a consistent, memorable pattern. For instance, use the first two letters of the service’s name, followed by a special character, and a standard passphrase that includes numbers.
  3. Employ a Passphrase: Instead of a password, consider using a passphrase. This could be a series of random words or a sentence that you find easy to remember but hard for others to guess. For example, “CoffeeTableBookAboutTh3Ocean!” incorporates complexity and length.
  4. Leverage Mnemonics: Use a mnemonic device to help remember complex passwords. For example, take the first letter of each word in a sentence or a phrase you like. “I love to eat pizza on Sundays!” might become “Il2epoS!”
  5. Use Two-Factor Authentication (2FA): Where possible, enhance your password security with 2FA. This typically involves something you know (your password) and something you have (a code sent to your phone or generated by an app), adding an extra layer of security.
Read more

Quiz

What is a recommended minimum length for a secure password?
A. 8 characters.
C. 12 characters.
B. 10 characters.
D. 6 characters.
The correct answer is C
The correct answer is C
Which of these is a recommended practice for creating a secure password?
A. Using your name and birthdate.
C. Including a mix of uppercase and lowercase letters, numbers, and special characters.
B. Reusing the same password across multiple sites.
D. Using common phrases or sequential numbers.
The correct answer is C
The correct answer is C
How does two-factor authentication enhance password security?
A. By creating longer passwords.
C. By making passwords easier to remember.
B. By adding a layer of security with something you have, like a code.
D. By encrypting passwords.
The correct answer is C
The correct answer is B

Analogy

Think of your online password like a house key. 

Just as you need a robust and unique key to protect your home from intruders, you need a strong, unique password to protect your digital information. Each key (password) should fit only one lock (account), making it harder for thieves (hackers) to gain entry. If you use the same key for every lock in your house (the same password for multiple accounts), losing that key or having it stolen puts everything at risk. Just as you wouldn’t choose a weak or easily copied key for your home’s front door, you shouldn’t choose a simple or commonly used password for your important accounts.

Read more

Dilemmas

Use a memorable phrase or a random password generated by a tool?
Prioritize password length or complexity when limited by site requirements?
Update a reused password everywhere or implement two-factor authentication first?

Subscribe to our newsletter.