Question:
Help me to create a password that cannot be cracked?
Vivek A
2007-04-20 10:46:34 UTC
someone has cracke passwords of my 2 ids and changed all info so i cannot access it back.
now i want to create a password which cannot be crake.
already for those both i have used all the helpful tips found online for creating a strong password.
please give me a detailed information
Six answers:
2007-04-24 05:12:45 UTC
I agree with the first question.
gdubchicago
2007-04-20 17:52:29 UTC
Well, you you need to do the following:



1) Get Norton Anti-Virus - run this on your computer and have it running all of the time.



2) Make sure your Windows Firewall is ON and operating. You can do this through your control panel/internet.



3) Make sure you do not have a "keystroke" recording program on your computer. These are programs are record keystrokes from your keyboard and put them into a text file or internet chat room for hackers. You can check this by going to Start/Run/ and then type in "msconfig" (without the "). If you see any programs that aren't for programs you recognize then you need to disable them from starting up. Don't worry it, won't mess up your computer :-)



4) Pick a new password that you use for only important things, such as online banking, online shopping, email management, etc. Make this password being a combination of both letters and numbers, and make it something that means nothing. Just make sure to remember it. The less obvious it is the better.



Hope this helps :-)
Bernz
2007-04-20 18:11:31 UTC
Unfortunately, what you're looking for doesn't exist. To understand why, you have to understand the basic password crackers.





Password crackers comme in a variety of flavors, but I'd say that you can group them into 2 categories:

- Dictionnary attack

- Brute force attack



In the Dictionnary attack, the attacker tries to use a dictionnary of common words and names to try to guess your password. It has also algorigths to add strings of numbers at the start and the end of password. For example, it's going to try "password", "password123", "confidential", etc. It also tries upper and lower cases, as well as proper names.



This method is actually quite good for hackers as it is very fast (the number of possibilities is relatively small, for a computer).



So, to avoid getting hacked by this method, avoid using common (or even not-so-common) words.



The brute force attack is, well, brute force. It will try EVERY possible combination of passwords, starting for 1 character to more. It will try numbers (0-9), letters (a-z, A-Z), symbols (!, #, ...) and anything else.



Brute force will always guess your password, but it might take quite some time, maybe years and years... So, in theory, this is why no password is safe.



How do you protect against this? Well, there are a few ways:



- Have LONG password (over 8 characters MINIMUM). Nowadays, it is recommended to have over 12 characters.



- Use bizarre symbols and letters. How do you remember them? Well, one way is to make up a setence and use the first letters of each word. Add a number here and there and you'll be okay.



- Get informed on HOW the password are stored, and WHAT are the mechanisms to protect your accout: if you're using a web-based email server, you might be more protected for many reasons: 1) the web is not that fast, so a brute force attack will take more time than if the application is located on a personnal network; 2) web applications might detect numerous failed logins, so it might block out your account. This is actually good as it will limit the number of tries that a brute force script would do; 3) activate the failed logins lockout on your windows PC (look at Local Policies). So applications actually store your password in clear text in their database (this is horrible!). So if someone gains control of the database, they'll have access to your passwords.



- Have different passwords: don't always use the same password. If you do, they'll guess one and then, all your accounts are unprotected.



- Disable standard accounts: as silly as it may seem, most hackers will try to gain control of your system/application by logging in as standard users (administrator, guest, etc.). Disable those accounts (make sure however that your system has ANOTHER administrator named another way).



- Secure your hardware: the easiest way to find a password is to PHYSICALLY gain control of the hardware. Once a hacker has control of your Hard drives, he'll remove them, put them on his PC and hack the encrypted passwords stored on your hard drive. This method is very fast and very effective. So ALLWAYS make sure that your PCs and safely stored.



Hope this helps!
UbiquitousGeek
2007-04-20 17:55:11 UTC
Maybe you have a keylogger installed on your system, or another system you've used.



I don't know about PCs, but Macs have a built in password utility that tells you how strong your password is and can even create unique ones for you.
2007-04-20 18:39:42 UTC
The first thing you need to do is scan your computer for malware programs that may be stealing your password and other information. Trojan and Rootkits and Keyloggers are the most common way of stealing passwords. Although, "Brute Force" type programs and methods are very popular.



Use these 2 programs and the procedure to scan your computer. You can, and should, also run your Antivirus and Antispyware programs with this procedure.



Download and Update Ewido (now called the AVG Antispyware). Do not run:



http://www.ewido.net/en/download/





AVG Anti-Rootkit



http://www.grisoft.com/doc/download-free-anti-rootkit/us/crp/0



TEMPORARILY SHOW HIDDEN FILES AND FOLDERS.



1. Click Start, and then click Control Panel.



2. Click Appearance and Themes, and then click Folder Options.



3. On the View tab, under Hidden files and folders, click "Show hidden files and folders", and clear(uncheck) the "Hide protected operating system files" check box.



IMPORTANT: Files are hidden by Windows for a very good reason. It is not wise to experiment with these files. Unfortunately, to successfully remove modern spyware we must turn this protection off temporarily. Please turn the protection back on when you have finished cleaning your system.





EMPTY INTERNET EXPLORER BROWSER CACHE:



1. On the Internet Explorer Tools menu, click Internet Options.



2. On the General tab, in the Temporary Internet Files section, click the Delete Files button. Select the Delete all offline content check box in the confirmation dialogue box that appears, click OK. Click OK again.



RESTART IN SAFE MODE:



To do this you need to hold down or repeatedly tap the F8 key while the computer is booting (when the computer is displaying a black screen with white text). When the boot menu appears, use your keyboard arrows to select "Safe Mode."



Safe Mode can look quite ugly. The color may look bad, and all of your desktop icons will be very large. This is normal.







START THE SCAN WITH YOUR PROGRAM(S).







When the scan and removal are completed REBOOT COMPUTER. This will restart you in normal mode.



RESET HIDDEN FILES AND FOLDERS.



The RESTORE POINTS may be infected with the Malware and cannot be used. Delete the old one(s) and make a new one.



CLEAR OLD RESTORE POINT(S). HERE'S HOW:



1. Click Start, and then click Control Panel.



2. Click Performance and Maintenance, click System, and then click on the System Restore tab.



3. Select the Turn Off System Restore check box, click Apply, then restart your computer.



4. Return to the System Restore Tab and turn System Restore back on.





TO SET A NEW RESTORE POINT:



1. Click the Start button.



2. Point to Programs, then navigate to Accessories, then System Tools, then click System Restore.



3. Choose Create a restore point, and then click Next.



4. In the Restore point description box, type a name for your restore point, and then click Next.



5. Click OK.



NOTE: If you are using Windows XP Service Pack 2 (SP2) and are unable to access the Internet after removing Malware, there is a command that may fix the problem. It works by resetting the winsock catalogue. Click on Start, then Run and type CMD in the box. Click OK. Type "netsh winsock reset" (no quotes)into the DOS window that appears.



STRONG PASSWORDS:



These sites have great information on making and using strong passwords.



http://www.microsoft.com/athome/security/privacy/password.mspx



http://tech.yahoo.com/blogs/null/13353/how-to-pick-a-genuinely-secure-password



Here is the way I set up my password:



I start with a base password made of 14 random Letters(caps and small), numbers and symbols. This base password is not used for anything by itself.



Now I use suffixes to add to the base password for everything I need to use a password with. For Instance:



Windows log on: BASEPASSWORDWLO



Main Yahoo sign in: BASEPASSWORDYAHOO



Yahoo Instant Messenger: BASEPASSWORDYIM



Online Wal-Mart account: BASEPASSWORDWAL-MART



eBay: BASEPASSWORDeBay



PayPal: BASEPASSWORDPayPal



I can keep the suffixes written down where other can see them because they are worthless without the base password. If a "Brute Force" type program "cracks" may base, it is worthless without the suffixes. Hopefully, the requirement to "crack" the suffix will deter any "Brute Force" attacker.



Note: Those suffixes are not what I use. They are only examples.
2007-04-20 17:53:52 UTC
My password is Harajuku lovers...





Damn... Now look what you made me do.


This content was originally posted on Y! Answers, a Q&A website that shut down in 2021.
Loading...