{"id":4055,"date":"2016-02-18T14:50:00","date_gmt":"2016-02-18T14:50:00","guid":{"rendered":"https:\/\/www.crazydomains.com\/learn\/password-security-does-size-matter\/"},"modified":"2020-06-10T13:58:13","modified_gmt":"2020-06-10T05:58:13","slug":"password-strength","status":"publish","type":"post","link":"https:\/\/www.crazydomains.my\/learn\/password-strength\/","title":{"rendered":"Password security: does size matter?"},"content":{"rendered":"

Security application provider Splash Data<\/a> has revealed their list of the 25 worst passwords of 2015<\/a> \u2013 with the Gold and Silver medals for the blindingly obvious continuing to go to 123456 and password.<\/p>\n

Does size matter?<\/h2>\n

According to statistics portal Statista the typical character length<\/a> of online passwords worldwide as of June 2015 was between eight and 12 characters, so does password length make a difference?<\/p>\n

There are various sites on the internet that offer to check your password security strength, and even ignoring any that are traps to steal your password, for many their wisdom is flawed. Longer does not necessarily equal better when it comes to passwords.<\/p>\n

Morgan Slain, CEO of Splash Data, says:<\/p>\n

“We have seen an effort by many people to be more secure by adding characters to passwords, but if these longer passwords are based on simple patterns they will put you in just as much risk of having your identity stolen by hackers.”<\/p><\/blockquote>\n

The difference between using 123456 and 12345678 is negligible \u2013 and while you might think that by replacing letters with numbers is a smart move (like the 66 percent of people<\/a> who combine letters and numbers) abc123 is only just outside the top 10.<\/p>\n

In the article Why you can’t trust password strength meters<\/a> award-winning security expert Sophos says:<\/p>\n

“The reality is that some guesses are far better than others because our password choices are not random… [Attackers] know that some words are used more often than others and they know about the cute tricks and bad habits we use to obfuscate them.” Making “password” into “passw0rd” does not make your account more secure.<\/p><\/blockquote>\n

How to be safe online<\/h2>\n

If password length isn’t the last word in strength, and switching out letters for numbers is amateurish, what can you do to be safer online? Mozilla<\/a> has some advice on creating secure passwords using a passphrase<\/p>\n