Educause Security Discussion mailing list archives

Re: Password Expatriation notification


From: Eric Case <eric () ERICCASE COM>
Date: Thu, 19 Aug 2010 12:49:25 -0700

What do you count a space as, it is a special character or does it not count?

The University of Arizona groups character as upper case, lower case, numbers 
and everything else.
-Eric



Eric Case, CISSP
eric (at) ericcase (dot) com
http://www.linkedin.com/in/ericcase
(520) 344-CISO (2476)



-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Alex Keller
Sent: Thursday, August 19, 2010 12:05 PM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] Password Expatriation notification

re: I've watched people who have trouble typing try to enter passwords
and pass-phrases. When every character takes 5 seconds to type, a 9
character password is much easier than a 16 character pass-phrase.

however, it is often easier for people to type passphrases (even poor
typists) becuase the keystrokes are familiar. i am not a great typist
and i can type "Should we go back to the moon?" much faster than
"vf$1048Za".

we are moving to passpharses (where possible) for administrative
accounts. we make sure the passphrase is sufficiently long, not based on
a common slogan, includes both upper and lower case letters, at least
one special character, and a string of numbers: "#Our cabin in cozy in
the thunder!1055". it is a pain at first, but once you can commit it to
muscle memory it gets a lot faster. either that or just cut and paste
out of Keypass or alike.

best,
alex

--
Alex Keller
Systems Administrator
Academic Technology, San Francisco State University
Office: Burk Hall 153 Phone: (415)338-6117 Email: alkeller () sfsu edu




Attachment: smime.p7s
Description:


Current thread: