Home > Security Tips > Compliance Counselor > Non-dictionary passwords users can remember
Security Tips:
EMAIL THIS
 TIPS & NEWSLETTERS TOPICS 

COMPLIANCE COUNSELOR

Non-dictionary passwords users can remember


Richard A. Davis
10.17.2001
Rating: -3.45- (out of 5)


Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   




This tip was submitted to the searchSecurity Tip Exchange by user Richard A. Davis. Let other users know how useful it is by rating the tip below.

There are many good password-creation ideas already presented here on searchSecurity, and I would like to add one I have used for years with success.

Tell the user to:
1) Open a yellow-pages phone book or a magazine to a random page.
2) Close you eyes, and point to the page. Note the word nearest your finger.
3) Close your eyes again, flip to another random page, and point to the page. Again, note the word closest to your finger.
4) Take the first syllable or two of the first word, and combine it with the last syllable or two of the second word. You may even choose to tack on the last digit of the page number of the second word or a character from the top row of the keyboard.
5) You now have a nonsense word that appears in no dictionary and is next to impossible to guess.

The first time I had someone do this, the first word was in a display ad for a photography studio. The second word was in a garden center advertisement. The resulting password was PHOTOHOSE. The user loved it!

P.S. A Palm OS program will do something similar, called WORDBOX. It is available in multiple languages and comes up with some great random-but-pronounceable passwords.


Rate this Tip
To rate tips, you must be a member of SearchSecurity.com.
Register now to start rating these tips. Log in if you are already a member.




BROWSE BY TAG
Compliance Counselor,   VIEW ALL TAGS

Digg This!    StumbleUpon Toolbar StumbleUpon    Bookmark with Delicious Del.icio.us   



RELATED CONTENT
Compliance Counselor
Identity lifecycle management for security and compliance
Interpreting 'risk' in the Massachusetts data protection law
FTC Red Flags Rules: How to create an identity theft prevention plan
Creating a HIPAA employee training program
Data protection tips for corporate compliance leaders
PCI DSS compliance requirements: Ensuring data integrity
Understanding PCI DSS compliance requirements for log management
Are 'strong authentication' methods strong enough for compliance?
Strategies for using technology to enable automated compliance
Common PCI questions: Web application firewalls or source code review?

RELATED RESOURCES
2020software.com, trial software downloads for accounting software, ERP software, CRM software and business software systems
Search Bitpipe.com for the latest white papers and business webcasts
Whatis.com, the online computer dictionary

DISCLAIMER: Our Tips Exchange is a forum for you to share technical advice and expertise with your peers and to learn from other enterprise IT professionals. TechTarget provides the infrastructure to facilitate this sharing of information. However, we cannot guarantee the accuracy or validity of the material submitted. You agree that your use of the Ask The Expert services and your reliance on any questions, answers, information or other materials received through this Web site is at your own risk.



Research Solutions for Network Security, Access Control and Security Threats
TechTarget Security Media
Information Security View this month\\'s issue and subscribe today.
Information Security Decisions Apply online for free conference admission.
SearchSecurity.com
HomeNewsMagazineMultimediaWhite PapersLearningAdviceTopicsEventsAbout Us

About Us  |  Contact Us  |  For Advertisers  |  For Business Partners  |  Site Index  |  RSS
TechTarget provides technology professionals with the information they need to perform their jobs - from developing strategy, to making cost-effective purchase decisions and managing their organizations' technology projects - with its network of technology-specific websites, events and online magazines.

TechTarget Corporate Web Site  |  Media Kits  |  Site Map




All Rights Reserved, Copyright 2003 - 2009, TechTarget | Read our Privacy Policy
  TechTarget - The IT Media ROI Experts