Passwords. Easily Explained.
It has to be longer than 8 digits.
It has to have capital letters.
And don't forget numbers and special characters.
And now, don't forget it.
But never write it down!
And please change it once a month of course.
For every device and account a new one.
Phew! Why does this "password thing" always have to be so complicated?
How is it possible to come up with a password that is safe and easy to remember?
For this purpose, it's good to understand how a password works
and how it's cracked.
You can imagine a password like the digits for a combination lock:
And just like the digits here
it's important that you don't use a combination
that is easy to guess.
Like your Birthday.
Or the name of your friend, child, pet.
Researching these on the web is quite easy.
The big difference to a combination lock is
that the hard work of trying combinations can be done by a computer.
If a machine tries to guess your password online
it hopefully get's blocked after a couple of tries.
But if that's not the case,
when a database gets stolen
for example.
The computer will have direct access to the lock.
Then even an old notebook
can try billions of passwords every second.
And of course the attackers start with a list of the most frequently used passwords.
And then try every single word in any language
slang and with variations by using dictionaries
and encyclopedias. That only takes a couple of seconds.
This is the reason why you should use an
"uncommon combination" of
letters, numbers and special characters.
Then the computer has to "manually"
try out every single combination.
This is called a "brute force attack".
And if your password has 10 letters
in only takes a couple of hours
until the combinations is cracked.
But if you just add one more letter
it will take as long as twenty days.
Because with every digit that you add, time increases exponentially.
Five more digits
and even ten computers need more than 2 400 years
to crack your password.
If you extend the "lock" also
by making the "wheels" larger.
By adding capital letters and numbers.
Those ten computers would need around 1.1 billion years
to crack a password with 15 digits.
Unfortunately
"nzb6Xrtc57l1mnk"
is so hard to remember.
That's why it's helpful
to think of a "passphrase"
instead of a password.
Because phrases are easier to remember -
and usually longer than words.
For example
"30dividedby10=Three"
or:
"A Passphrase features more security > a Password"
or simply:
"This is my Passphrase for E-Mails".
With these you will have more than 15 digits
small and capital letters
and in most cases even special characters.
Cracking such a passphrase with "brute force"
takes atleast a couple of thousand years.
Yet you can easily remember it.
Alright. Have fun coming up with your own phrases ;-)
Because you shouldn't use the examples from this video
alright... that's enough.
It's enough.
Thank you for watching.
You can find more info and references
concerning passphrases
in the video description.
I will stop talking now.
...