How to create secure passwords for the web

Last Updated: 26/10/10

Passwords are the most common way we identify ourselves to systems and services, and though we can often think of them as a nuisance, selecting and protecting them effectively is the single most important choice we make in making our systems and data secure. These days, the ability to "brute force" (i.e. computer based guessing) is among the most common ways poorly selected passwords are compromised.

At UCD we advise that a strong password is at least 10 characters long and contains a mixture of the following

An uppercase letter
A lowercase letter
A number
A non-alphanumeric character (! % ; : @ £ * &)

Step 1

Selecting a password that meets the above criteria can be hard, but the method below gives a way to produce a password based on a phrase so that it is both memorable, and difficult to guess. Take a phrase you find easy to remember, for instance:

I get the train and bus to Co. Dublin

Step 2

Turn the phrase into an acronym by selecting the first letter from each word, keeping punctuation and capitalisation:

IgttabtC.D

Step 3

Add symbols in a sensible way:

Igtt&btC.D

Step 4

For added complexity replace letters with numbers. E.g. 7 for T.

Ig77&b7C.D

Note:

To secure your password by Avoiding the following:

Using “password keeper” tools in browsers
Sending your password out by email
Using complete words as passwords e.g ‘Liverpool’

Why ?

Guessable Login's are test, those that are "guessable" or found using brute force guessing methods.

UCD IT services never ask for passwords via email. If you need to reset or change your UCD password click here.

How to create secure passwords for the web

Other articles you might be interested in