25 worst passwords of 2011

2»

Replies

  • k8blujay2
    k8blujay2 Posts: 4,941 Member
    I recently learned a new trick from IT to make more secure passwords. It's so simple, I can't believe I didn't know this. Pick a sentance that has meaning for you and then use the first letter of each word as the password. Adding capitals and numbers will make it even better.

    e.g. Sarah joined MFP in 2011 and has lost 8 pounds = SjMFPi2011ahl8p

    using a sentance about who is in your family, when you were married, or when you graduated is super easy to remember.

    PS - the above is not ANY of my passwords :)

    That's what the IT guru in our college told us too... I never did that, but my password is just as good... to an observer it might just be complete and utter nonsense... and I usually through in random numbers and characters in there as well... And I don't use the same password for email that I do for things like facebook.... that's just as stupid as using the above passwords... oh and my email has only been hacked by spammers once.
  • garnetsms
    garnetsms Posts: 10,018 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    I work in IT too, and have users that pick a word (kid's name, motorcycle model, product name, company name, etc.) then put a number after it. When it expires they just increase the number by 1. When I go to help them, I can usually guess the password in 2-3 tries. Unless they have it on a post-it on their desk... then I just log in.

    I have been guilty of this. My brother works in IT so he told me to change it up a bit, adding symbols, and combine upper/ lower case letters in the password. He advised that it still was not good to use my son's names...but what are the chances that a hacker knows my children's name?
  • d0gma
    d0gma Posts: 3,966 Member
    I read something recently (wish I could remember where) that basically said that all of those "security" requirements for passwords (use a capital, and a number and symbol) make all passwords MORE hackable than if we were all advised to pick a random series of 3 unrelated words. It basically said that with a special program a hacker can hack those 'secure" passwords in (I want to say) a couple of hours, but a random series of words would take more than 500 years with the same program. It was interesting.

    XKCD did a comic about this.
    http://imgs.xkcd.com/comics/password_strength.png
  • k8blujay2
    k8blujay2 Posts: 4,941 Member
    oh my gosh! that would drive me nuts! mine would never make sense to anyone but me. i don't know how i could come up with a new one every 60 days AND remember it! i'd want to go back to ones from before.

    i have several and i often forget what i used at what site/ account. it gets annoying!

    I recently learned a new trick from IT to make more secure passwords. It's so simple, I can't believe I didn't know this. Pick a sentance that has meaning for you and then use the first letter of each word as the password. Adding capitals and numbers will make it even better.

    e.g. Sarah joined MFP in 2011 and has lost 8 pounds = SjMFPi2011ahl8p

    using a sentance about who is in your family, when you were married, or when you graduated is super easy to remember.

    PS - the above is not ANY of my passwords :)

    Ohhh - I love this!!! I've been running out of ideas...at work we have to change them every 60 days and cannot use any of our last 24 passwords....and the passwords can't even have the same 3 consecutive letter/numbers combo in them as the prior 24!
    Thank you, thank you!!!

    I just use a trick my dad said they would use at work.... take a password, insert a character, move said character everytime you need to change your password... then move onto a new password...
  • sarahmaryfearnley
    sarahmaryfearnley Posts: 366 Member
    I recently learned a new trick from IT to make more secure passwords. It's so simple, I can't believe I didn't know this. Pick a sentance that has meaning for you and then use the first letter of each word as the password. Adding capitals and numbers will make it even better.
    That's not a "new" trick, but it is a good way to create secure passwords.

    It was new to me.
  • ThePhoenixRose
    ThePhoenixRose Posts: 1,978 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    I work in IT too, and have users that pick a word (kid's name, motorcycle model, product name, company name, etc.) then put a number after it. When it expires they just increase the number by 1. When I go to help them, I can usually guess the password in 2-3 tries. Unless they have it on a post-it on their desk... then I just log in.

    this is exactly what i did at work. and i wrote in on a post-it and put it in the drawer with my pens. why? cause i only worked 10 hours a week, and they often needed things i was working on when i wasn't there. everyone knew what my password was and how to find it. i didn't keep anything on there i needed to be private, and all my work was protected by a different password, so no one could alter what i'd done. made perfect sense to me!
  • XXXMinnieXXX
    XXXMinnieXXX Posts: 3,459 Member
    I'm not good with passwords. I can't add random numbers because I just won't remember them! X
  • ScatteredThoughts
    ScatteredThoughts Posts: 3,562 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    Um, can I ask why you would be walking up to someone's computer and logging in when they are not there? Not only that but why would someone give you their password to log on in the first place?

    Actually, in that particular case, we had the right to log in to any of the computers. There was no such thing as "your" computer; they all belonged to the organization, and this was clearly stated. It was annoying when people would submit a ticket to have a computer problem fixed, and then leave the computer logged in but locked under their id. Trust me, the last thing I want to know is someone else's password; between work and home I have at least 30 to 40 passwords to deal with just for me.
  • This content has been removed.
  • SaketoKim
    SaketoKim Posts: 254 Member
    bologna1
  • JustJennie1
    JustJennie1 Posts: 3,749 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    Um, can I ask why you would be walking up to someone's computer and logging in when they are not there? Not only that but why would someone give you their password to log on in the first place?

    Actually, in that particular case, we had the right to log in to any of the computers. There was no such thing as "your" computer; they all belonged to the organization, and this was clearly stated. It was annoying when people would submit a ticket to have a computer problem fixed, and then leave the computer logged in but locked under their id. Trust me, the last thing I want to know is someone else's password; between work and home I have at least 30 to 40 passwords to deal with just for me.

    I just find that odd. Our computers were the companies as well but we were never to give our password out to anyone.

    Interesting.
  • ElizabethRoad
    ElizabethRoad Posts: 5,138 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    Um, can I ask why you would be walking up to someone's computer and logging in when they are not there? Not only that but why would someone give you their password to log on in the first place?

    Actually, in that particular case, we had the right to log in to any of the computers. There was no such thing as "your" computer; they all belonged to the organization, and this was clearly stated. It was annoying when people would submit a ticket to have a computer problem fixed, and then leave the computer logged in but locked under their id. Trust me, the last thing I want to know is someone else's password; between work and home I have at least 30 to 40 passwords to deal with just for me.
    Couldn't you log in as an administrator?
  • ScatteredThoughts
    ScatteredThoughts Posts: 3,562 Member

    Couldn't you log in as an administrator?

    Windows 95 didn't allow for that convenience, when you had the computer locked. :) Of course, I could have just rebooted the system and let them lose whatever work they had in progress.
  • meg7399
    meg7399 Posts: 672 Member
    I have the same three to four password variations for everything...all pretty AWESOME and hard to guess, numbers, symbols, caps, etc. I have one for online accounts (paying bills, banking), one for internet sites (MFP, FB, Email, etc) and one for work things. The problem is...I never know which goes with which account...and I am always getting locked out! :P
  • Wreak_Havoc
    Wreak_Havoc Posts: 597
    Here's a few other tricks I've seen while doing computer security sweeps. (Yes, I am. Sorry)

    From this thread. Son's name - how could they get the name? A lot of people put the name and date taken on the back of the picture. 3 seconds to open up the pic and find the name.

    Real Life encounters. Black keyboard, black sharpie. Any questions?
    This one was good, but only took me three times to get it. Paperweight on desk the number "3". Not the name but you get the hack. Motamore Alfred Snodgrass. Password = toArSda. ( "." being the special character.

    Whatever password you use should be at least 8-12 characters and have upper, lowwer case, number, and special character..

    For those working in larger companies with tons of different passwords, sugget that they look into "Active Directory" One password, all program access, and changed every 90 days.
  • Wreak_Havoc
    Wreak_Havoc Posts: 597
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    Um, can I ask why you would be walking up to someone's computer and logging in when they are not there? Not only that but why would someone give you their password to log on in the first place?

    Actually, in that particular case, we had the right to log in to any of the computers. There was no such thing as "your" computer; they all belonged to the organization, and this was clearly stated. It was annoying when people would submit a ticket to have a computer problem fixed, and then leave the computer logged in but locked under their id. Trust me, the last thing I want to know is someone else's password; between work and home I have at least 30 to 40 passwords to deal with just for me.
    Couldn't you log in as an administrator?

    IT departments should be setting up every computer and have a master admin log in with a admin password.
  • cdngirl71
    cdngirl71 Posts: 2,641 Member
    No one would guess my passwords. My work one has to be changed every 60 days and if someone tries to guess your password, after the 3rd try it locks you out.
  • _Timmeh_
    _Timmeh_ Posts: 2,096 Member
    "1-2-3-4-5? That's the stupidest combination I've ever heard of in my life! That's the kinda thing an idiot would have on his luggage!"
    -Spaceballs

    I just spit my coffee out...... :laugh: Great movie!
  • SinIsIn
    SinIsIn Posts: 1,865 Member
    I like picking random stuff like.
    beefcalculator1
    badunkadonk 1
    nippleclamp1

    stuff like that.
  • JPod279
    JPod279 Posts: 722 Member
    Here is one for you that I used in the past.. I'll post it the way I saw it on a shirt since it will be blocked otherwise

    abc
    def
    uck
  • Sepheara
    Sepheara Posts: 208 Member
    As someone who works in IT, it scares me some of the passwords I have seen. I have walked up to a desk, picked a word from a poster on the wall, and been able to log in to their computer with it.

    Um, can I ask why you would be walking up to someone's computer and logging in when they are not there? Not only that but why would someone give you their password to log on in the first place?

    Actually, in that particular case, we had the right to log in to any of the computers. There was no such thing as "your" computer; they all belonged to the organization, and this was clearly stated. It was annoying when people would submit a ticket to have a computer problem fixed, and then leave the computer logged in but locked under their id. Trust me, the last thing I want to know is someone else's password; between work and home I have at least 30 to 40 passwords to deal with just for me.
    Couldn't you log in as an administrator?
    I can log in as an admin, but it will boot off your account and lose any progress on anything you have open, or I can reboot your machine and it will make you lose progress on anything you had running. Also I work on some weekends and people add things like "fix ASAP" and I'm off monday and some people get downright NASTY if it's not fixed monday when they come in, so yeah, I either have to boot them (and hear them whine about how that excel sheet they never saved got lost and it was 8 million hours of work), or I have to hear them whine about how horrible I am because I can't fix a "simple" problem that's probably their fault anyway. so yeah, if you use a stupid password, or write it on a stick it note, I'm going to use it to avoid the above 2 problems. Also even if I log in as an admin, I can still go to the c drive, documents and settings, and your profile folder and look @ your documents anyway, you're not hiding anything, so what's the issue? My company also states that pcs are company property not "yours". if we had to wait for you to login everytime you had an issue nothing would ever get fixed.
  • BodyPumpDaveInFL
    BodyPumpDaveInFL Posts: 30 Member
    These are not mine but they illustrate the concept of an "idea" that is spelled wrong with numbers and letters:

    KantB2Tuf
    KnotSoE4u
  • InnerFatGirl
    InnerFatGirl Posts: 2,687 Member
    35mf75.jpg

    HAHAHAHAHA THIS MADE ME LAUGH SO MUCH :laugh: :laugh: :sad: :sad: :laugh: :laugh:
  • christine24t
    christine24t Posts: 6,063 Member
    I work in health care, and we are grilled about always closing out of our scheduling/charting program when we get up to do anything. But the actual computer is not a huge deal itself!
  • LuckBeWithU
    LuckBeWithU Posts: 173 Member
    DROWSSAP