Synopsis: The more variations you use, the harder it is to crack.
Any of the techniques presented here can be compromised if used singly and as stated.
Therefore combine them and use variations of various sorts.
For example Dictionary Word can be varied by using unusual capitalization, punctuation, or spelling. Or, preferably, all three.
Previous pattern: Dictionary Word
Next pattern: Password Salt
Contributors: Joe Bergin
Note: Maybe this is two patterns, one for combinations and one for variations. -- JoeBergin
How similar is it to Password Salt? -- DirkRiehle
I think it is more general. -- JoeBergin
I agree that Unusual Variation is more general than Password Salt. Password Salt seems to be about mutation of characters as a device (though it does speak more generally of adding a special character to the password, too). I am reminded of genetic algorithms, which offer three forms of "reproduction": direct reproduction, in which a character is generalized or specialized; crossover, in which parts of two words are used to create a third; and mutation, in which one character spontaneously changes to some random other character. I can imagine using all three to generate passwords, especially from Dictionary Words. (Private Word Association is a degenerate form of crossover.) -- EugeneWallingford
|