<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:wfw="http://wellformedweb.org/CommentAPI/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
	xmlns:slash="http://purl.org/rss/1.0/modules/slash/"
	>

<channel>
	<title>tatianes &#187; Security</title>
	<atom:link href="http://tatianes.com/category/security/feed/" rel="self" type="application/rss+xml" />
	<link>http://tatianes.com</link>
	<description>My name is Tatiane Santos. I’m a senior web developer based in sunny Los Angeles. I’m passionate about the web and always keep myself on the cutting-edge of web technologies.</description>
	<lastBuildDate>Wed, 16 Dec 2009 15:31:41 +0000</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.1</generator>
	<language>en</language>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
			<item>
		<title>How to create strong passwords you can remember</title>
		<link>http://tatianes.com/2009/11/how-to-create-strong-passwords-you-can-remember/</link>
		<comments>http://tatianes.com/2009/11/how-to-create-strong-passwords-you-can-remember/#comments</comments>
		<pubDate>Mon, 30 Nov 2009 07:57:46 +0000</pubDate>
		<dc:creator>tati</dc:creator>
				<category><![CDATA[Security]]></category>

		<guid isPermaLink="false">http://tatianes.com/?p=288</guid>
		<description><![CDATA[I originally wrote this article over a year ago but end up never publishing it. Last week, one of my clients&#8217; website got hacked. Actually, the host company they’re using got a massive attack and while I was fixing my client&#8217;s website, I noticed they passwords were very weak. So I decided to publish this [...]]]></description>
			<content:encoded><![CDATA[<p>I originally wrote this article over a year ago but end up never publishing it. Last week, one of my clients&#8217; website got hacked. Actually, the host company they’re using got a massive attack and while I was fixing my client&#8217;s website, I noticed they passwords were very weak. So I decided to publish this article and send a link to all my clients.</p>
<p><strong>How to create strong passwords you can remember</strong></p>
<p>The majority of the internet users need to remember at least one password these days. Their email password, online banking, Facebook, just to name a few. Keeping track of all passwords can be difficult, so most people create easy-to-remember passwords which usually are weak and easy-to-guess. Because passwords are the only thing standing between your private information and the outside world, a weak password will make you an easy target for scams and identity theft.</p>
<p><strong>What makes a password strong?</strong><br />
A strong password:</p>
<ul>
<li>Is at least 8 characters long</li>
<li>Uses a variety of characters: uppercase letters, lowercase letters, numbers and symbols</li>
<li>Is significantly different from previous passwords</li>
<li>Gets changed regularly, about every four months</li>
<li>Is very different from username</li>
</ul>
<p>Strategies to avoid:</p>
<ul>
<li>Using personal information (name, date of birth, social security)</li>
<li>Using sequences or repeated characters (12345678, 44444444, abcdefgh)</li>
<li>Using dictionary words in any language</li>
<li>Using only one password for all accounts</li>
<li>Using sample passwords given on different web sites, including this one</li>
<li>Keeping default passwords generated by websites</li>
<li>Store your passwords in a online storage</li>
</ul>
<p><strong>Passwords you can remember<br />
</strong>To help you easily remember your password, consider using a sentence, song title or movie title as a password.<strong> </strong>After picking your password, add complexity to it following the strong password strategies. Your password should look like a random sequence of characters which is easy to remember but hard to guess or hack.</p>
<p><strong>Adding complexity to your password<br />
</strong>Complexity can be simply described as substituting letters for either numbers or symbols. The greater variety of characters you have in your password, the harder it is to guess. Here are some basic substitutions, but it’s better if you create your own.</p>
<p><strong> </strong></p>
<p><strong> A                    4, @, /\, ^</strong><strong><br />
B                    I3, 13, E3, |:<br />
C                    (, [, {<br />
D                    I), [), cI<br />
E                     3, &amp;<br />
F                     I=, ph<br />
G                    6, 9, C-<br />
H                    /-/, [-], )-(<br />
I                      1, !, |<br />
J                     _|, _I, &lt;/<br />
K                    |&lt;, |{<br />
L                     1, |_, i_, !<br />
M                   |x|, |\/|, em<br />
N                    ^/, |\|,<br />
O                    0, (), []<br />
P                    |*, |&gt;<br />
Q                    0_, (),<br />
R                    12, I?, [Z<br />
S                     5, $<br />
T                     7, +, -|-<br />
U                    I_I, LI<br />
V                    \/<br />
W                   vv, \^/<br />
X                    &gt;&lt;, }{, ex<br />
Y                     `/, 1<br />
Z                     2, 7_</strong></p>
<p><strong> </strong></p>
<p><strong>Creating strong passwords</strong><br />
I like using positive affirmations as passwords, so I’ll use “Be happy” for this example.<br />
Chosen password: Be happy<br />
Adding complexity:</p>
<ul>
<li>Replace B with |3</li>
<li>Replace e with &amp;</li>
<li>Replace space with  ,</li>
<li>Replace h with H</li>
<li>Replace a with @</li>
<li>Add an exclamation point at the end</li>
</ul>
<p>Final password: <strong>|3&amp;,H@pp1!</strong></p>
<p>Other examples:<br />
Smells like teen spirit (Nirvana song)-&gt; SmLiTeSp -&gt; <strong>$mL1T3$p.</strong><br />
The Matrix (movie) -&gt; <strong>+h3,M4+r1x</strong></p>
<p><strong> </strong></p>
<p><strong>Create different passwords for different systems<br />
</strong>Another good practice is to create different passwords for different online accounts. That way, if one account is breached, your other accounts won’t be put at risk too. On websites that don’t host sensitive information, like those of The New York Times or a hobby blog, it’s okay to use the same password. One way of using this strategy is to append the first two letters of the name of the website or service to the beginning of each password.<br />
For example, for my gmail account, I’ll use <strong>gm</strong><strong>|3&amp;,H@pp1! </strong>as my password and use<strong> </strong><strong>fa|3&amp;,H@pp1! </strong>for my Facebook account.</p>
<p><strong> </strong></p>
<p>I highly suggest you use the strategies above to change your passwords right now!</p>
]]></content:encoded>
			<wfw:commentRss>http://tatianes.com/2009/11/how-to-create-strong-passwords-you-can-remember/feed/</wfw:commentRss>
		<slash:comments>0</slash:comments>
		</item>
	</channel>
</rss>
