The most important rules for a password
Keeping your accounts safe is crucial, as cybercrime continues to be on the rise. Take steps to secure your data with strong passwords that are both memorable and difficult to crack. Many people have heard and some of us have adopted the eight characters rule. However, this rule is beginning to seem wrong. The person who first published this rule admitted himself.
The password rules were published in 2003 by the National Institute of Standards and Technology (NIST) in the form of a document entitled “Special Publication 800-63. Appendix A.” Although this company is full of people who are experts in the field and familiar with the most current information, some of their rules seem to be from a white paper from the 1980s. During this time, cybercrime wasn’t nearly as prevalent or sophisticated as it is today and was very different.
NIST publication
Reveals rules made by Bill Burr himself. When writing the 10Gs for building and intelligence, sources at NIST did not provide help. They used security concerns as justification for not disclosing passwords, preventing him from partnering with developers to create something that could have been more secure. Burr penned this text in the 1980s explaining how he wanted to implement a no-trade policy with China. However, recent articles published since the Wall Street Journal interview show that Burr regrets his rules.
Those password rules have only been in place for 15 years. They were based on outdated research, and they are outdated now after new studies show their error. The most prominent example of this is the following cartoon by Randall Munroe.
A password with a mix of letters, numbers and symbols can take longer to decipher than a short one that follows Burr’s password pattern. A password made with only four words also takes up less space, which makes it easier for humans to remember than a long and complicated password.
NIST went on to write some new rules with a lot of data at its disposal. Paul Grassi wrote the new rules and published them last June. There’s been a lot of talk recently surrounding changing passwords often, using symbols and changing back again. These are unnecessary tactics that have no impact on increasing security or usability. Grassi believes that only changing passwords when necessary, and choosing short words which are easy to remember, is better than choosing a password with letters, numbers and symbols.
If you liked this article, you should also visit this one.
Author: PC-GR
The World of Technology
