Security Basics mailing list archives
Re: Linking Password Length to Write-down probability
From: "Dan Tesch" <dan.tesch () comcast net>
Date: Fri, 27 May 2005 10:44:19 -0500
Following this thread makes me think about the proprietary app(s) my companyuses that don't allow anything longer than an eight character psswd. and to top
it off isn't case sens!
It seems obvious that the longer/more complex the password, the more likely the user is to write it down, so I'm not sure that such a study would really yield any new insight. What I've taken to doing is stressing the idea of a passphrase instead of a password, then using the initial letters of each word, and mixing caps.other characters as needed for complexity, so: "My dog used to have fleas but he ate them" becomes "Mdu2Hfbh8T" 10 characters, rather than 8, upper-lower-numeric, but still a password the user can be reasonably expected to remember. dcj2 Stian
--------------------------------------------------------------------------------
Current thread:
- Linking Password Length to Write-down probability Stian Øvrevåge (May 26)
- RE: Linking Password Length to Write-down probability Ryan Platt (May 27)
- Re: Linking Password Length to Write-down probability Gonzalo Martinez (May 27)
- Re: Linking Password Length to Write-down probability Nick Owen (May 30)
- RE: Linking Password Length to Write-down probability Andrew Aris (May 31)
- Re: Linking Password Length to Write-down probability Nick Owen (May 30)
- RE: Linking Password Length to Write-down probability Miguel Dilaj (May 27)
- Re: Linking Password Length to Write-down probability Nick Owen (May 30)
- Re: Linking Password Length to Write-down probability Mihai Amarandei (May 30)
- <Possible follow-ups>
- Re: Linking Password Length to Write-down probability Doug . Janelle (May 27)
- Re: Linking Password Length to Write-down probability Dan Tesch (May 30)
- RE: Linking Password Length to Write-down probability Bob Kurth (May 27)
- Re: Linking Password Length to Write-down probability John Blackley (May 27)
- RE: Linking Password Length to Write-down probability KWajda (May 30)
- Re: Linking Password Length to Write-down probability Doug . Janelle (May 30)
- Re: Linking Password Length to Write-down probability Mark Burnett (May 30)