Creating your own password algorithm

It’s pretty common to hear stories of passwords being hacked and it’s still surprisingly common for people to use the one password for everything. A lot of people use a password manager but if you are away from your regular device it can be a multi step process to log in.

I’ve been using my own password algorithm for a few years now. It means I generally have a unique password for each website and a way to remember what each password is. An algorithm is a set of rules applied to solve a problem.

Say I was creating a new account on Facebook. I would use the name of the website as a seed for the password. My rule might be; split the word Facebook up, swap the words, capitalise and then add a string that I remember. So a password for facebook becomes

BOOKFACEwordpass2018!!??

A password for LinkedIn might be

INLINKEDwordpass2018!!??

I might have to have an added rule, if I can’t easily swap the name of the website, just split it in half. So Twitter might be

TERTWITwordpass2018!!??

Now this algorithm isn’t perfect, one person could find one of my many compromised passwords on any number of services and figure it out. But this prevents your password being compromised everywhere and a internet bot cracking your accounts using a list of known passwords. It does mean if I create test accounts for the same service they tend to have the same password.

What do you use to manage your passwords?

??Francis Lobo

Senior Architect, Quality Engineering at Slalom Build

6 年

I have been using something on the similar lines. if you are a polyglot, pull in words from other languages and l33t them. 3 to 4 unrelated leet'ed words.. might work well till the quantum computers become cheap :D

Marina Levi

CyberSecurity Lead, PhD Cryptography

6 年

That's quite a week algorithm I should say as it includes "real" words like website name and etc. You can use the password strength test to calculate how many years/minutes it would be needed to crack it... Why not use vcloud based password managers?

回复

要查看或添加评论,请登录

?? Sam Connelly的更多文章

  • Using metrics for test coverage reporting

    Using metrics for test coverage reporting

    Imagine you are working on a mobile app project with releases every 2 weeks. Say a manager wants a report on test…

  • A Mobile App Test Strategy

    A Mobile App Test Strategy

    The superannuation and investment mobile app I’ve been working on over the last 1.5 years is doing well.

    2 条评论
  • Evolution of my CV

    Evolution of my CV

    My CV has evolved a bit over the years. But there have also been a few constants too.

    3 条评论
  • Orders of Communication

    Orders of Communication

    Have you ever wanted to ask a large group of people their thoughts on a particular topic? Maybe you want to know what…

    3 条评论
  • My next Career move

    My next Career move

    I recently asked myself, “where would I like to take my career?”. This is a blog post on that reflection.

  • Back on the job market (again)

    Back on the job market (again)

    It’s only the third time this year I find myself job hunting (again). It was only back in June I found myself going…

    2 条评论
  • Why bother testing?

    Why bother testing?

    As a tester, I don't practice selling my craft very often. This blog post is an attempt to put together my thoughts…

    3 条评论

社区洞察

其他会员也浏览了