RE: Suggested "safe" password length

["CHRIS GRABENSTEIN" <LFGRABC () LF VCCS EDU>]

Or just use a whole phrase as your password.  An 8-digit password using a mix
of upper/lower case, numbers, and symbols (94 possibilities I believe unless
you use ALT+XXX characters) has 6,095,689,385,410,816 possibilities.  A
14-digit passphrase using only upper and lower case letters has
1,056,931,425,538,820,521,590,784 possibilities.  Use more than 14 digits and
I don't believe the password will even be stored in an LM hash making it even
more secure.

|-----Original Message-----
|From: Rodrigo Otaviano [mailto:rodrigo () otaviano com] 
|Sent: Friday, November 14, 2003 8:08 PM
|To: security-basics () securityfocus com
|Subject: Re: Suggested "safe" password length
|
|
|In-Reply-To: <059901c3aaa2$b3cf5880$1100a8c0@dtg17>
|
|Another good way to generate a password is by memorizing a 
|
|long phrase and then picking the first letters of each word.
|
|
|
|For example: "it's been 4 years since my graduation!"
|
|
|
|The password would be" Isb4ysmg!"
|
|
|
|At first sight it sounds like strange but it's very easy to remember 
|
|once you've memorized the phrase. Of course, it would be 
|
|interesting to mix both letters and numbers.
|
|
|
|Rodrigo Otavio Paes de Barros Otaviano

---------------------------------------------------------------------------
Forum Systems PRESIDIO: PGP / XML GATEWAY APPLIANCE
The Presidio integrates PGP data encryption and XML Web Services security to
simplify the management and deployment of PGP and reduce overall PGP costs
by up to 80%.
FREE WHITEPAPER & 30 Day Trial -
http://www.securityfocus.com/sponsor/ForumSystems_security-basics_031027
----------------------------------------------------------------------------