There is one cool joke that the worst nightmare of a web hacker is that he suddenly forgets all his passwords. Password fatigue (or password chaos or identity chaos) is the feeling experienced by many people who are required to remember and manage a lot of passwords.
And how many passwords do you need to keep in your head? I am sure as an Internet marketer, blogger and/or active social media user you must have quite a few passwords to manage.
This post will attempt to make your life easier or at least to encourage you to take it easier…
Creating a Good Password
These are plenty naturally. Most will just generate a random combination of letters and numbers which will be impossible to remember. Others are more fun, they generate passwords based on some criteria you specify.
One of such tools generating memory-friendly passwords is PasswordBird which creates passwords based on your (favorite) second and last names and (your date of birth):
Facts: How Good Is Your Password?
1. This table shows the approximate amount of time required for a computer or a cluster of computers to guess various passwords. The figures shown are approximate and are the maximum time required to guess any password.
2. The following infographic visualizes the “breakability” of some of the popular passwords based on their strength – it might appear a little funny but lot of people are actually using those simple passwords (via):
3. There are also a few tools that help you measure the “strength” of your password: here’s one of them called Password Meter that checks how strong your password is based on the combination of the following criteria:
- Number of characters;
- Number of uppercase letters and lowercase letters;
- Numbers and symbols;
- Repeat characters;
- Consecutive uppercase letters, lowercase letters and numbers;
Password Manager
Many people recommend LastPass, KeePass and Roboform.
As FireFox junkie, I am using a FireFox plugin for that (which probably is not really secure or..?). The plugin is Sxipper and I find it awesome and easy to use.
Sxipper claims to protect your personal data by keeping it secure on your computer and retrieving it for you when you choose to share it online. Besides, Sxipper recognizes OpenID forms and helps you manage your OpenIDs.
Immediately after the installation, the tool will offer you to import all your passwords in it:
After importing (or entering manually) your personal data in Sxipper, go to any page containing a login form and you’ll be able to select the username under which you want to login:
The tool has a plenty more options and features you can read about here including persona management, disposable email address, form auto-filling, etc.
Post img by by azrainman
Latest posts by Ann Smarty (see all)
- Semantic Research + AI = Win - May 15, 2023
- Visual Quotes. HOW TO: Quote Using Text-to-Image Tools (and Go Viral) - Aug 9, 2022
- Digital Marketing Tools: Best New SEO Software I Use - Apr 5, 2022
Nice tips for creating secure passwords, and I’m glad to learn about Sxipper.
I’m a RoboForm fan, which works in Firefox & IE. Now that I’m migrating to Chrome, I’m lost if I encounter a site that requires a password. I have not heard of “password fatigue” before, but the term sure does explain the feeling.
So glad you take the time to evaluate these tools to share with us!
Hackers take great joy in bypassing passwords, I’ve done it myself.
– Your job is to make passwords unpredictable.
It is wrong to tell people that passwords can be broken without explaining the proper way to choose one that will be more difficult to break.
– Given enough time every password can be broken (it may take 8000 years, but it can be done).
You should choose a password that is nine or more characters long. Don’t use a word that is found in a dictionary – a program can be written to use every word in a dictionary.
Once you use a password that you consider good, don’t use a sequence of that password (Tolkien1, Tolkien2, Tolkien3)
Try making up an acronym – JDwfLTismf (“Jack Daniels whiskey from Lynchburg, Tennessee is my favorite”). Unless you know me well enough to know that I used to like Jack there would be no reason to consider that phrase. If you did know my like for Jack there is still no reason to consider this as a possible password.
Try and misspell a word using one or more special characters in the center of the word, like Disné#Land.
Since many passwords are case sensitive, use upper and lower case.
When it comes time to change passwords, I take the local newspaper and choose a word. The word for today is Doonesbury, which I modify to be D00n3sb_r. Or take the word lightbulb and spell it 1igh+b_1B. It is actually very simple, once you get the hang of it. Don’t forget that you can use your phone keypad to make lightbulb into 544482852. If you SMS a password, don’t use easy words like your name.
Take the word “automated” and on a US keyboard type one character to the right “siyp,syrf” and doing this means that you can use your family name if you want to.
For sites that do not have any money related information I use one password. I take an unnatural word combination, like an adverb and a noun (an adverb, broadly defined, is a word which modifies any word other than a nouns), combine them the make a word that does not exist in the dictionary. SlowlyTruck is a combined word that does not appear when searched on the internet. Slightly change the spelling and you really have a wonderful password – how about Sl0w1yTruck
I only use one password for sites like blogs. For sites that have money related things I use the ideas referenced above, but since I have a good memory I really screw the text up. I have also taken a text file and just typed a dozen or so characters, and whatever came out was a password.
Change your password at work every two months and personal passwords as often as you feel necessary.
Change your password now. Don’t wait for the prompt.
I use Roboform to manage my Passwords and its great.
I tend to create Passwords which are at least 12 char and must contain a special char.
I feel obliged to tell anyone reading this that hands-down, the best password manager I’ve used is Keepass. I think you can find it keepass.info
I’ve tried at least a half dozen over the last 3 years, and this completely crushes them. (I have around 400 profiles/logins I manage online-and no, I’m not a spammer)
Here’s why I like it:
*freeeee!
*opensource so you know where the data goes
*password generator (customizable – length, characters, etc)
*auto-type
*one click to open webpage and login in many cases
*provides additional info box for notes,
*on and on and on….
Nice post Ann. I recently started using Roboform. I would have tried using the others had I known about them.
Oh well, maybe I will give them a go 🙂
I have hundreds of passwords. Between domain name accounts client hosting accounts, social media profiles etc. The list goes on and on and on.
This used to be a real problem for me and have always been hesitant about using something that stores passwords on my computer. So I have been using Lock Box for about 3 years now.
I put it on a flash drive so when I’m not needing my important passwords I disconnect my flash drive from the computer. When I go to login I first have a master password for the flash drive and then I have another password to access lock box. Also lock box allows you to keep everything organized neatly in folders. For me it’s more than worth the 20 bucks, but they give you a free trial so you can check it out first.
I have used Billeo for password management for several years. It is secure, easy to navigate and never fails to perform. I also use the ewallet for online purchases. Superior product.
I tend to create Passwords which are at least 12 char and must contain a special char.
I recently started using Roboform. I would have tried using the others had I known about them.