Wednesday, November 23, 2011

25 "Worst Password" 2011 Revealed


If you see a password below, STOP!
Do not finish reading this post and go immediately change your password - before you forget. You will probably make changes in several places passwords tend to be reused for multiple accounts.
Here Are Two Lists, The First Compilation Of SplashData: 

25 "Worst Password" 2011 Revealed 
  1. Password
  2. 123456
  3. 12345678
  4. Azerty
  5. abc123
  6. Monkey
  7. 1234567
  8. Letmein
  9. Trustno1
  10. Dragon
  11. Baseball
  12. 111111
  13. Iloveyou
  14. Teacher
  15. Sunlight
  16. Ashley
  17. Bailey
  18. Passw0rd
  19. Shadow
  20. 123123
  21. 654321
  22. Superman
  23. Qazwsx
  24. Michael
  25. Football
Last Year, Imperva Looked 32 Million Passwords Stolen RockYou, A Hacked Site, And Published Its Own Top 10 "worst" List:
  1. 123 456
  2. 12345
  3. 123456789
  4. Password
  5. iloveyou
  6. Princess
  7. RockYou
  8. 1234567
  9. 12345678
  10. abc123
If you have received to date and do not see any of your passwords, it is good news. But note that passwords combine letters and numbers, such Passw0rd (with "o" replaced by a zero) began to enter the list in 2011. abc123 is a password mixed, which appeared on both lists.
25 "Worst Password" 2011 Revealed 
Last year, Imperva, has provided a list of best practices password created by NASA to help its users to protect against rocket science, they are:
It must contain at least eight characters
It should contain a mixture of four different types of characters - uppercase, lowercase, numbers and special characters such !@#$%^&*,;" If there is a single letter or special character, it must not be first or last character in the password.
It should not be a name, a slang word, or any word in the dictionary. It does not contain the name or e-mail.
Following this advice, of course, means that you will create a password that will be impossible unless you try something credited to security guru Bruce Schneir: Turn a phrase in a password.

For example: "Now I want to give my sleep," could become nilmDOWN2s, 10-character password that does not appear in any dictionary.

I do not remember your password? Schneir says it's ok to write it and put it in your wallet, or better yet a hint to keep in your wallet. As long as you have a list of sites and services that the password is. Try using a different password for each service, but if you can not do, at least develop a set of passwords that are used in different places.

One day, we will use authentication schemes, perhaps biometrics, which does not require as much jump through hoops to protect our data. But meanwhile, are only passwords we all have, so you must be strong enough to do the job.



at