What is the correct type for a email password

[Ken W]

What is the correct type for a email password

[Jaymoss]

a good secure one

[Taf]

Generally it should not contain your name or age, date of birth, pet names, well known phrase, etc. And you should be able to memorise it of course.

[Jaymoss]

Originally Posted by Taf

Generally it should not contain your name or age, date of birth, pet names, well known phrase, etc. And you should be able to memorise it of course.

or use a password manager

https://www.lifewire.com/strong-pass...amples-2483118

[Halcyon]

A mixture of letters, numbers, and charactars, more than 8 charactars long and have nothing meaningful or related to you about it.

[SnoopZ]

All my passwords are like this:

D256#dkjgi@3

[mrmistoffelees]

Originally Posted by SnoopZ

All my passwords are like this:

D256#dkjgi@3

Using this as an example , this looks like a secure password and to a degree it is, however the following is much much more secure

GreenhouseCoastalDachsund

The length of the password is more important than its complexity. Alas many services that require still require the old minimum 8, 1 uppercase,1 number & 1 special character as a standard

[Jaymoss]

Originally Posted by mrmistoffelees

Using this as an example , this looks like a secure password and to a degree it is, however the following is much much more secure

GreenhouseCoastalDachsund

The length of the password is more important than its complexity. Alas many services that require still require the old minimum 8, 1 uppercase,1 number & 1 special character as a standard

Testing a theory in a password checker a random password like Snoops (I did it twice same thing) is 1 character less and would take 1 Octillion years to crack where as yours would take 6 Septillion years hahaha you can even delete another character so D256#dkjgi@3D256#dkjgi@ so it would be 2 characters less and still take 3 times as long to crack

Take what you will from that hahahaha

[mrmistoffelees]

Originally Posted by Jaymoss

Testing a theory in a password checker a random password like Snoops (I did it twice same thing) is 1 character less and would take 1 Octillion years to crack where as yours would take 6 Septillion years hahaha you can even delete another character so D256#dkjgi@3D256#dkjgi@ so it would be 2 characters less and still take 3 times as long to crack

Take what you will from that hahahaha

I think perhaps I forgot to include more details

When a complex password like snoops is used there is a tendency for that password to be reused across multiple services where as a three word password that’s easier to remember promotes and generally encourages unique passwords to be used therefore minimising the risk of a breach.

NIST do not recommend the use of complex characters or enforced password rotation anymore

However CISO’s gonna CISO

[SnoopZ]

All my passwords are unique and I don't know them, I put my trust in a proper password manager, I know by saying that it's going to open a can of worms and trigger people.

All my banking are on paper though written in code which can't be guessed.

[mrmistoffelees]

Originally Posted by SnoopZ

All my passwords are unique and I don't know them, I put my trust in a proper password manager, I know by saying that it's going to open a can of worms and trigger people.

All my banking are on paper though written in code which can't be guessed.

I’m not you saying you personally don’t use unique passwords , I’m saying that the type of password you have encourages the vast majority of people to use it across multiple services.

Personally I’m a big fan of proper password managers when used properly but where possible I insist SSO is used for all our apps

[Stephen]

Also going with three random words as a good option too.

Such as monkeywaveschipolata

[Ken W]

Originally Posted by Stephen

Also going with three random words as a good option too.

Such as monkeywaveschipolata

Like mine 3 unrelated phases