element14 Community
element14 Community
    Register Log In
  • Site
  • Search
  • Log In Register
  • Community Hub
    Community Hub
    • What's New on element14
    • Feedback and Support
    • Benefits of Membership
    • Personal Blogs
    • Members Area
    • Achievement Levels
  • Learn
    Learn
    • Ask an Expert
    • eBooks
    • element14 presents
    • Learning Center
    • Tech Spotlight
    • STEM Academy
    • Webinars, Training and Events
    • Learning Groups
  • Technologies
    Technologies
    • 3D Printing
    • FPGA
    • Industrial Automation
    • Internet of Things
    • Power & Energy
    • Sensors
    • Technology Groups
  • Challenges & Projects
    Challenges & Projects
    • Design Challenges
    • element14 presents Projects
    • Project14
    • Arduino Projects
    • Raspberry Pi Projects
    • Project Groups
  • Products
    Products
    • Arduino
    • Avnet & Tria Boards Community
    • Dev Tools
    • Manufacturers
    • Multicomp Pro
    • Product Groups
    • Raspberry Pi
    • RoadTests & Reviews
  • About Us
    About the element14 Community
  • Store
    Store
    • Visit Your Store
    • Choose another store...
      • Europe
      •  Austria (German)
      •  Belgium (Dutch, French)
      •  Bulgaria (Bulgarian)
      •  Czech Republic (Czech)
      •  Denmark (Danish)
      •  Estonia (Estonian)
      •  Finland (Finnish)
      •  France (French)
      •  Germany (German)
      •  Hungary (Hungarian)
      •  Ireland
      •  Israel
      •  Italy (Italian)
      •  Latvia (Latvian)
      •  
      •  Lithuania (Lithuanian)
      •  Netherlands (Dutch)
      •  Norway (Norwegian)
      •  Poland (Polish)
      •  Portugal (Portuguese)
      •  Romania (Romanian)
      •  Russia (Russian)
      •  Slovakia (Slovak)
      •  Slovenia (Slovenian)
      •  Spain (Spanish)
      •  Sweden (Swedish)
      •  Switzerland(German, French)
      •  Turkey (Turkish)
      •  United Kingdom
      • Asia Pacific
      •  Australia
      •  China
      •  Hong Kong
      •  India
      •  Japan
      •  Korea (Korean)
      •  Malaysia
      •  New Zealand
      •  Philippines
      •  Singapore
      •  Taiwan
      •  Thailand (Thai)
      •  Vietnam
      • Americas
      •  Brazil (Portuguese)
      •  Canada
      •  Mexico (Spanish)
      •  United States
      Can't find the country/region you're looking for? Visit our export site or find a local distributor.
  • Translate
  • Profile
  • Settings
Personal Blogs
  • Community Hub
  • More
Personal Blogs
Clem Martins's Blog Why passwords are important...
  • Blog
  • Documents
  • Mentions
  • Sub-Groups
  • Tags
  • More
  • Cancel
  • New
  • Share
  • More
  • Cancel
Group Actions
  • Group RSS
  • More
  • Cancel
Engagement
  • Author Author: clem57
  • Date Created: 3 Oct 2019 1:45 PM Date Created
  • Views 4194 views
  • Likes 8 likes
  • Comments 47 comments
  • keepass
  • password-based encryption
  • change password
Related
Recommended

Why passwords are important...

clem57
clem57
3 Oct 2019

     I know a lot of you are thinking, why bother about passwords? Well let me clue you in. Many passwords we use are very weak. Let me list a few and show how long it would take to break with modern computers.

 

        • password     This is in the top 5 common list of passwords used.
        • pickles         This is in the top 2160 common list of passwords used
        • milkbad        This would take 800 milliseconds because just letters and short
        • mIlkBaD       This would take 2 minutes because short and only letters
        • m1ln2aD      This would take 6 minutes. Now we have numbers and mixed letters, but too short and no symbols
        • m1$k3a%     This would take 1 minutes. Ops, not enough to fix the problem. Too short.
        • qwerty12345asdf    Wow! finally one that would take 701,000 years to brute force attack.
        • qw$rty12#45as*f     Adding in the symbols we get 130,000,000 years to brute force attack.

 

So in conclusion, it takes the following things to make a password strong.

  1. More than 8 characters or even  more than 16 characters.
  2. Upper and lower case. This helps double the choices from 26 to 52.
  3. Add in numbers and symbols. One without the other can weaken the password.
  4. Finally, use a password generator and stored database like KeePass for instance.

 

If you wish to play around with your choices, I found this great site https://www.comparitech.com/privacy-security-tools/password-strength-test/#password-test-tool .

Give it a spin and comment below on your experience. I would like to know what is the toughest password using the above tool?

Anyone up to the challenge. Oh a password generator does not count! image

  • Sign in to reply

Top Comments

  • BigG
    BigG over 6 years ago in reply to Gough Lui +6
    In my opinion, the correct message is that users need long passwords more so than say short "complex" ones. The way I teach my kids about passwords is to type out a long sentence without spaces. It is…
  • glennvanderveer
    glennvanderveer over 6 years ago +5
    There has to be a tradeoff of entropy and usability. If you make the rules to stringent, no one will be able to remember their password. I always think of this comic when someone starts taking about password…
  • Gough Lui
    Gough Lui over 6 years ago +5
    Users need complex passwords - we know that much. Users need to avoid reuse as well - in case any password is compromised. But on the server side, administrators need to do their part as well. For one…
  • gadget.iom
    gadget.iom over 6 years ago

    Here are results for the passwords I use for two of my more secure services. Both I know and type from memory.

    image

    image

    • Cancel
    • Vote Up 0 Vote Down
    • Sign in to reply
    • More
    • Cancel
  • Jan Cumps
    Jan Cumps over 6 years ago in reply to koudelad

    koudelad  wrote:

     

    My recommendation is using certificates wherever possible: SSH, remote desktops, etc.

     

    Yes. They have their own difficulties (safe storage, expiration management) but I prefer them too.

    I also try to use it in integrations. When installing a MQTT server, one of the first thing I do is take care that other servers need a certificate and TLS to subscribe or publish.

    • Cancel
    • Vote Up +4 Vote Down
    • Sign in to reply
    • More
    • Cancel
  • koudelad
    koudelad over 6 years ago

    My recommendation is using certificates wherever possible: SSH, remote desktops, etc.

     

    If I can't use a certificate, I use a strong generated password and store it locally in something like KeePass. I wouldn't trust cloud password managers, there have been security breaches.

     

    Use two factor authentication for all publicly available services. Nice and open-source application for mobile phones is FreeOTP. Or hardware modules like Yubikey, which gadget.iom mentioned.

     

    Encrypt data storage on computers and mobile phone. Not for an illusion of being unbreakable for secret services, but for common situations when device gets lost or stolen by a random guy.

    • Cancel
    • Vote Up +4 Vote Down
    • Sign in to reply
    • More
    • Cancel
  • glennvanderveer
    glennvanderveer over 6 years ago

    I would also argue that for brute force password cracking, the length of time that a password is valid should also be a factor.  If it takes 3 months to brute force guess a password, but the password life is only 1 month, then that password is secure enough to use.

    • Cancel
    • Vote Up +2 Vote Down
    • Sign in to reply
    • More
    • Cancel
  • clem57
    clem57 over 6 years ago in reply to Jan Cumps

        Jan Cumps I would agree except:

     

    However, we find that relatively weak passwords, about 20 bits or so, are sufficient to make brute-force attacks on a single account unrealistic so long as a “three strikes” type rule is in place.

     

    Unfortunately this is not yet the norm for most websites that are non-financial... Leaving most people not knowing the fate of their data.

    • Cancel
    • Vote Up 0 Vote Down
    • Sign in to reply
    • More
    • Cancel
<>
element14 Community

element14 is the first online community specifically for engineers. Connect with your peers and get expert answers to your questions.

  • Members
  • Learn
  • Technologies
  • Challenges & Projects
  • Products
  • Store
  • About Us
  • Feedback & Support
  • FAQs
  • Terms of Use
  • Privacy Policy
  • Legal and Copyright Notices
  • Sitemap
  • Cookies

An Avnet Company © 2026 Premier Farnell Limited. All Rights Reserved.

Premier Farnell Ltd, registered in England and Wales (no 00876412), registered office: Farnell House, Forge Lane, Leeds LS12 2NE.

ICP 备案号 10220084.

Follow element14

  • X
  • Facebook
  • linkedin
  • YouTube