课程: Programming Foundations: Web Security

今天就学习课程吧!

今天就开通帐号,24,600 门业界名师课程任您挑!

Strong passwords

Strong passwords

- Developers must be smart about passwords in order to protect against credential attacks. The following advice is good for everyone, but it's especially important when passwords are used to administer servers. You should use long passwords with at least 12 characters. 12 is a minimum. 15 characters or more would be even better. It's good to use character variety; uppercase, lowercase, numbers and symbols but variety is not as important as the length. A common mistake is to think that a short, complex password is more secure than a simple, long one. Any eight character password, even one with character variety, can be discovered by trial and error in less than three hours. A 12 character password using all lowercase letters would take two weeks. If you use both length and variety together then a 12 character password would take 9,000 years. You should also avoid patterns and dictionary words, we already know that hackers…

内容