For a short time, I was working with Homeland Security. Inside they had a division where security was super important. So important that they had paid this man $50,000 a year to build a random password generator. I come in, train my system to the lead group and suddenly this man has no job, and they junked the password generator app.... lol
I saw that the people were using it (they were obliged to, no choice), but the passwords were random, long and complex and they recalled it by writing the password on their arm, palm or paper... I thought, well, that is stupid!
My system is basically this, use it if you wish:
- every person has a talent, math, colours, music, etc... mine is languages, so that is what I used.
- the goal of a good password is a series of letters/numbers/symbols that does not exist in ANY dictionary on earth in any language
- depending on the security requirement, 8 characters is good, more is better. Mine are typically well over 64 digits long on sites like banking/investing, less so on other sites like here and different on every website
- You create an algorithm, this NEVER changes and exists ONLY IN YOUR HEAD, nowhere else.
- An example of a SIMPLE algorithm is...
-- use a simple word, you can even write this word on a stickie and place it on your monitor
-- apply your algorithm to that word, and that becomes your password.
Let me give you an example, this is not one that I use but used to in the past.
- choose an easy word that you document, let me randomly choose the word "god"
- translate that to a different language, I'd choose for my example Czech, so "god" becomes "pambicek"
- write the word backwards, at the 2nd spot insert a "!", in the 4th spot insert a "&" in the end add a "2".
- the above remains IDENTICAL in all future passwords using other easy simple words.
- the password now becomes "
k!ec&ibmap2"
- With a little practice you can easily do this in your head with any password, and you won't ever forget it because you can choose easy words. It also covers the aspect of complexity and does not exist in any dictionary in the world.
- It makes changing passwords easy, just choose another word and apply your same algorithm again.
- Use your talent, change your passwords 2-4 times a year and enjoy security... don't reuse old passwords.
Sounds complex, but it takes longer to explain than do and isn't all that hard. At one point I had 16 different algorithms based on different levels of security required.
Create your own and enjoy.
