Choosing A Strong Password

Your best defense against hackers is a strong password. A strong password is as long as possible. Always use at least 6 characters in your password. The longer the password, the more difficult it is to attack with a "brute-force" search (a computer testing hundreds of password combinations against yours every second).

Characteristics of a Strong Password

  • Contains both upper- and lower-case letters
  • Includes numbers and punctuation (?!#), as well as letters
  • Is memorable (does not have to be written down)
  • Is 7-8 characters long
  • Can be typed quickly (deters others from learning your password as you type it)

DO Use Phrases or Sentences

A particular effective technique is to think of a sentence and turn it into a password, such as:

  • rsKf0myH&1W2sYU - Raindrops keep falling on my head and I want to steal your umbrella
  • wru2rxy? - Who are you to ask why?
  • bWiIso3! - Beware the ides of March!

DON'T Use Personal Information

A weak password is one that:

  • Uses personal information, such as your name, a friend's name, a pet's name, your phone number, social security number, birth date, or address
  • Uses any single word in the dictionary, whether spelled frontwards or backwards
  • Uses any single word with letters simply replaced by numbers, e.g., bl0wf1sh
  • Is easy to spot while you're typing it, e.g., 12345, qwerty (top line of keyboard), or nnnnnn

Keep Passwords Secret

A new way for hackers to trick people into giving away their passwords and other personal information is through a scam called "phishing." Phishing is the practice of sending millions of bogus e-mails that appear to come from popular Web sites like eBay or Amazon. The emails look so official that many people will respond to requests for their login name and password.

Microsoft, eBay, Amazon, PayPal, or any other reputable company never ask for your password through email. If you receive a request for your password, social security number, or other sensitive information via email, notify the company immediately by phone or through their Web site.

The 6-Month Rule: Change Passwords Frequently

Even if your passwords are strong, you should change them approximately every 6 months. Also, never use your NetID passwords for other online services such as shopping or free e-mail accounts. You should have a unique password for your NetID account.

Other Ideas

See the Top 10 Ways for Protecting Your Computer, specifically written for the University of Nevada, Reno.