Sunday, November 8, 2009

Create easily recalled or memorizable and robustic and strong passwords

Until the scanner for finger prints, eye iris and other biometrics gets widespread implementation, we need passwords. However, creating and maintaining the password has been challenging. It is recommended to avoid dictionary words, reverse of them, username, birthday and some other easily guessed or cracked password. However, strong and robust passwords are hard to be memorized or recalled. Those passwords have been written down in notebook or even on post note and hanged from monitor by users. The user’s action defeats the purpose for strong passwords.

Here is my approach: a formula and a sentence. You can design a formula or hash function so that you can recall easily. Then create a sentence or open a book and find a sentence that you like. Memorizing this formula and the sentence is much easily to memorize the password. The password will be created based on the formula and the sentence.

Here is an example:

Formula: {first letter of username}{a number}{first letter of the sentence including punctuation mark}

Sentence: What a beautiful world!

Username: system

Password: s3Wabw!

Try to memorize “s3Wabw!” might be hard. Memorize the formula and the sentence is much easier.

Also, the password is strong with number, upper/lower case letter and punctuation mark. As we have 10 digits and 52 upper/lower letters and assume we can use 8 punctuation marks, it is hard to crack above password as we have 70^7=8,235,430,000,000 choices of passwords.

No comments:

Post a Comment