To know what makes a password good, it is necessary to know what makes a password bad. A bad password is one that is easily guessed by a stranger, a friend, or a computer program. Examples of bad passwords are:
- License plate numbers
- Dates
- Words found in any dictionary, including languages other than English, slang, jargon, abbreviations, proper names, etc.
- Combinations of dictionary words
- Dictionary words spelled backwards
- Numbers
- Any personal information
What is left? With all of these restrictions, it is still possible to come up with a password that is easy to remember, yet cryptic enough not to be guessable. One of the most popular ways to select a good password that is easily remembered is to take a phrase or quote that you can remember.
A Unix system password should be at least 6 characters long and include at least one upper case letter (A-Z), digit (0-9) or punctuation character (such as . , or - ). Passwords will not be accepted in Unix if:
- they are less than 6 characters long
- match anything in your Unix account information, such as your login name or an item from your "finger" data
- are found in the system's spelling dictionary
- have more than 2 repeated characters; thus "aaa" would be rejected.
- names of people and places
- any password that has one or more illegal characters in it. A ^ before a character means that the Ctrl key is held at the same time as the specified character. Illegal characters include: ^c, ^d, ^g, ^h (or Backspace), ^i (or Tab), ^j, ^m, ^o, ^r, ^s, ^q, ^y, ^z, ^\, ^, Delete, @, and #.
Note: Unix administrators randomly run a program called crack. The purpose of this program is to test all the user passwords to see if they are too easily guessed. If it finds a password that is too easy, the Unix account is automatically suspended until the user changes his password.
How to Choose a Good Password:
- Choose a short, simple phrase, six to eight words, that will be easy for you to remember.
I like to eat green peas.
- If any of the words are homonyms for other letters or symbols, write them with those symbols (e.g. are =r, you = u, two = 2)
I like 2 eat green peas.
- Now, make an acronym. Drop all but the first letter of each word.
Il2egp
- Capitalize arbitrarily, but with restraint, try to keep the password easy to remember.
iL2eGp
- Add a punctuation mark or two to bring your password's length to seven or eight characters.
iL2eGp!