SECURITY - PASSWORDS - 28.11.2008

Open Sesame!

On a worldwide basis, the most used password is “123456”... Let’s hope your own security is better than this! Just in case, here are some useful password-related websites and tools.

1. Numbers and letters. Let’s get one thing straight: “123456” is not a good choice for a password since it’s much too obvious. You should also avoid the name(s) of your partner, children, pet or car number plate, etc. Tip. The safest passwords consist of a combination of numbers and letters, preferably with both capital and lower case letters. But how on earth do you remember such a complex combination? It’s simple: abbreviate a simple sentence, for instance, “When I find myself in times of trouble, mother Mary comes to me” - this becomes “WIfmitotmMctm”. Now replace vowels by numbers resembling them. This could produce something like “W1fm1t0tmMctm”. This password is easy for you to memorise, but it’s virtually impossible for others to discover. More advice and some mnemonic aids are provided at InsideTufts (http://www.tufts.edu/tccs/r-strongpass.html). Note. many computer users jot down their passwords on a post-it note that’s near their computer. This is a bad idea!

2. Remembering passwords. Have you enabled the “AutoComplete” function in your browser (in IE7 via Tools; Internet Options; Content; AutoComplete)? This means that all the passwords you’ve used so far will be completed automatically, for example when you log in to Gmail. This is handy, but it means that anyone working on your computer will also be able to log in automatically.

If you’re using several computers (for example at home, at the office, laptop), this “AutoComplete” function won’t help you. Tip. If you’re a Firefox user, you can install the Foxmarks add-on on all your computers. It sends your passwords (as well as your favourites) to a central server. When you launch a surfing session later (even on another computer), your data will be loaded automatically. To reduce security risks, your database of passwords is accessible only after you’ve entered (yet another) password.

An alternative tool, also for browsers such as IE, is RoboForm (http://www.roboform.com), although we prefer Passpack (http://www.passpack.com): this service stores all your passwords online and is compatible with all browsers.

3. Star Wars. If you’ve forgotten a password, you can “reveal” the asterisks by using some special software. An example is the popular Asterisk Key (http://www.lostpassword.com/asterisk.htm). Other free alternatives are SC-PassUnleash (http://www.soft-central.net/passunleash.php) and Password Unmask (http://www.passwordrecovery.in/password-recovery/password-unmask.asp). When you click on the asterisks in the password field, they will change into a legible password. Note. These tools don’t work in all applications or for protected documents. Shareware tools for applications (such as, Word, IE, etc.) are offered by Pro Data Doctor (http://www.passwordrecovery.in) and Passware (http://www.lostpassword.com).

The best passwords consist of a combination of numbers and letters - you can remember them using a mnemonic aid. Save them securely online using Foxmarks (Firefox) or Passpack (all browsers).

© Indicator - FL Memo Ltd

Tel.: (01233) 653500 • Fax: (01233) 647100

subscriptions@indicator-flm.co.ukwww.indicator-flm.co.uk

Calgarth House, 39-41 Bank Street, Ashford, Kent TN23 1DQ

VAT GB 726 598 394 • Registered in England • Company Registration No. 3599719