|
Most people have a love-hate relationship with passwords. On one hand, passwords provide the security that facilitated many conveniences of modern life. Conversely there are just too many passwords to remember. First, passwords need to be random. Given the range of possibilities (solution space), each possibility must have equal chance as the others. Given humans many years of conditioning (learning?) – this is anything but an impossibility. Second the solution space must be big enough to deter brute force attacks. A brute force attack is trying out each possibility at a time under all the possibilities are exhausted. So, using dates for a 6-digit password is not a good idea – it reduces the solution space by 88%. Currently, a solution space of 2^256 (256 bits or 78-digits) is enough. This is roughly the number of atoms in this universe. Even with a supercomputer that can try out a trillion passwords each second, our sun will probably burn out first before the correct password can be found! You can refer to our earlier works “A Gentle Introduction to Cryptography”. Third, a secure system must not leave traces of the password being used. This is where the computer can help. If it has a secure password system, then this password can be used to unlock all other passwords. These other passwords can be randomly generated, since there is no need to remember them. These are the design objectives of our Seecrets Delivery Services Password Manager. Important Tips - Never trust any password system that requires keyboard entry. There are just too many key loggers around. Key loggers or keystroke recorders are commonly used by companies to record all e-activities by their employees.
- Be wary of biometric systems. Biometric systems shift the risk to the individual. Remember the Mercedes owner who lost his index finger and vehicle to car thieves. Also, biometric information once cloned has devastating outcomes for that unlucky individual. The thieves can claim to be him or her.
- When preparing your personal password, remember to be illogical, irrational, crazy, zany and unpredictable. This is one of the few human activities that you will not be penalized for being “not human”
How to choose a good super-password? Without a strong password, your security is as good as no security. - Choose about 10 words that you can commit to memory especially words or sentences that appear as nonsense.
- Translate some of these words into foreign languages for example Sanskrit, Esperanto, Navajo, Chinese, Japanese, Korean, Hawaiian, Maori, Latin, German, Spanish and others. The web has enough facilities to help you on these. For example, Chinese use many words that begin with X or Z, something that is lacking in English.
- Misspell each word. For some, you omit a character. For others you add a character. Or interchange some characters. Use your imagination. The more "absurd" your list of words are, the better is the strength.
- For inspiration, try translating some of your favorite short messages into a foreign language, and then retranslate it from the translated version. We guarantee it will be hilarious.
- This password must NEVER be repeated anywhere else.
- Take time to do this task, days if necessary. We took years to develop this system. If you do not value your own e-security and e-privacy, nobody will.
Who says that crypto is dull and uninteresting? If you enjoyed this little exercise, you will find that crypto can be funky, funny and cooool! |