Password Security

You identify yourself to the computer system when you login.  Your username tells the computer who you are; your password proves that you are who you say you are.  Like the PIN on your bank teller card, your password is the key to your account.  You must always keep it secret.

NEVER, under any circumstances, should your password be the same as your username or your real name.

If someone else knows, or is able to GUESS, your password, then the computer system has no way of telling them apart from you.  They can gain access to our computers; from there they can try to break into other computers around the world.  They can delete all your files, or cause mischief in your name.  You could be held responsible for their actions.

• Always keep your password a secret.

• Never tell your password to anyone else.

• If you must write your password down, keep it in a safe place.

We occasionally run a password cracking progam, such as a real cracker might.  There is a chance that you will be inconvenienced if your password is insecure and "guessed" by the program, as we may immediately change any such password.

How to Choose a Password

Password security isn't just a matter of thinking up a nice word and keeping it to yourself.  You must choose a password which will be difficult for someone else to guess or crack.

DON'T USE

Words that can be associated with you

We often have a tendency to forget passwords, so we choose something that has particular relevance to ourselves: the name of a loved one, our favorite car, sport, or ice cream, etc.  Anyone knowing a little about us can make a list of these words and easily crack the password. All-digit passwords usually fall into this category - birthdates, phone numbers.

Dictionary, Atlas, etc. words

The computer can test these words in less than an hour.  A program with access to a good dictionary has a very good chance of cracking a password that is a real word.  Crackers with a CD-ROM will soon have access to extensive dictionaries of words, place names, foreign
languages, song titles, Shakespearean characters, street directories and the like.  This can include minor modifications such as the addition of a digit or an initial uppercase letter.

DO USE

Preferably something you can remember, that can be typed quickly and accurately and includes characters other than lowercase letters.

Examples

Made-up "words" -  chokBel8  (can be "pronounced", has a digit)
Personal acronyms - ihCbltdT  (i hate Coffee but love to dring Tea)
Mispell and/or invert syllables or words - D0gzmaDD  (instead of 'mad dogs' - also replaces letter o with digit zero)