<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Password Production</title>
	<atom:link href="http://meyerweb.com/eric/thoughts/2005/01/31/password-production/feed/" rel="self" type="application/rss+xml" />
	<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/</link>
	<description>Things that Eric A. Meyer, CSS expert, writes about on his personal Web site; it&#039;s largely Web standards and Web technology, but also various bits of culture, politics, personal observations, and other miscellaneous stuff</description>
	<lastBuildDate>Fri, 19 Mar 2010 00:27:46 -0400</lastBuildDate>
	<generator>http://wordpress.org/?v=2.9.2</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: &#187; Blog Archive &#187; Creating (and remembering) strong passwords</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-410960</link>
		<dc:creator>&#187; Blog Archive &#187; Creating (and remembering) strong passwords</dc:creator>
		<pubDate>Tue, 23 Sep 2008 22:56:16 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-410960</guid>
		<description>[...] Creating strong password doesn&#8217;t have to be a complicated procedure. I&#8217;m not using strings of arbitrary characters. You can get a good idea of some rules and practices here. [...]</description>
		<content:encoded><![CDATA[<p>[...] Creating strong password doesn&#8217;t have to be a complicated procedure. I&#8217;m not using strings of arbitrary characters. You can get a good idea of some rules and practices here. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EricT</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-408323</link>
		<dc:creator>EricT</dc:creator>
		<pubDate>Thu, 11 Sep 2008 01:41:01 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-408323</guid>
		<description>i have a password generator that you all might find useful.
It is located on my personal site.
&lt;a href=&quot;http://eric.torvinen.net/password-generator.php&quot; rel=&quot;nofollow&quot;&gt;http://eric.torvinen.net/password-generator.php&lt;/a&gt;

Just type a word in the form and it will spit out the word in md5 and
crypt. 

it is meant for apache&#039;s htaccess files but i guess it creates harder passwords. and if you forget it you can always retype the word i my form or another for like it and get the hash.

i would use md5 because it stays the same on all systems. crypt changes every time, crypt encryptyion is used for unix/linux boxes.</description>
		<content:encoded><![CDATA[<p>i have a password generator that you all might find useful.<br />
It is located on my personal site.<br />
<a href="http://eric.torvinen.net/password-generator.php" rel="nofollow">http://eric.torvinen.net/password-generator.php</a></p>
<p>Just type a word in the form and it will spit out the word in md5 and<br />
crypt. </p>
<p>it is meant for apache&#8217;s htaccess files but i guess it creates harder passwords. and if you forget it you can always retype the word i my form or another for like it and get the hash.</p>
<p>i would use md5 because it stays the same on all systems. crypt changes every time, crypt encryptyion is used for unix/linux boxes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LifeHacker, Dansk Produktivitets - og Softwareguide.</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-103458</link>
		<dc:creator>LifeHacker, Dansk Produktivitets - og Softwareguide.</dc:creator>
		<pubDate>Thu, 08 Mar 2007 13:10:37 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-103458</guid>
		<description>[...] er svært at gætte for andre Trivielt ikke?, men på trods af dette har webeksperten Eric Meyer en metode til at finde det perfekte password: Vælg 2 ord du kan huske, og flet ordet ind i hinanden. Så [...]</description>
		<content:encoded><![CDATA[<p>[...] er svært at gætte for andre Trivielt ikke?, men på trods af dette har webeksperten Eric Meyer en metode til at finde det perfekte password: Vælg 2 ord du kan huske, og flet ordet ind i hinanden. Så [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EnigmA-X&#8217;s blog &#187; Password&#8230;anyone?</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-88321</link>
		<dc:creator>EnigmA-X&#8217;s blog &#187; Password&#8230;anyone?</dc:creator>
		<pubDate>Mon, 05 Feb 2007 16:39:01 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-88321</guid>
		<description>[...] mijn zoektocht kwam ik deze site tegen. Misschien is de content wat oud (jan. 2005), maar het idee en de comments eronder zijn [...]</description>
		<content:encoded><![CDATA[<p>[...] mijn zoektocht kwam ik deze site tegen. Misschien is de content wat oud (jan. 2005), maar het idee en de comments eronder zijn [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WSA</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12168</link>
		<dc:creator>WSA</dc:creator>
		<pubDate>Wed, 11 Jan 2006 19:34:18 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12168</guid>
		<description>That URL should be: http://www.cyberscrub.com/keychain
Sorry about that :)</description>
		<content:encoded><![CDATA[<p>That URL should be: <a href="http://www.cyberscrub.com/keychain" rel="nofollow">http://www.cyberscrub.com/keychain</a><br />
Sorry about that :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WSA</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12167</link>
		<dc:creator>WSA</dc:creator>
		<pubDate>Wed, 11 Jan 2006 19:33:27 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12167</guid>
		<description>CyberScrub KeyChain is a free password manager we use at work. http://www.cyberscrub.com
I found this on their website:
Manage ALL Passwords with One Phrase. When you log on to KeyChain with your Master Pass Phrase you will have instant access to all of your password protected websites. Select your destination from a special list you have created- then simply &quot;Click &amp; Go&quot;. It&#039;s that easy! Each time you visit a site requiring a user name and password KeyChain auto enters this information and logs you in. It even prompts you to add these passwords to the program if you have not already done so. Never manually fill in credit card details again. Online shopping is a snap because KeyChain automatically enters your selected credit card details, Shipping and Billing address and more. All of your data is secured with strong encryption. Only you have access to the sensitive data within KeyChain. All information, including passwords, credit cards and other data, is protected with strong encryption algorithms. The USB flash drive also synchronizes with your host computer to back up your encrypted password list. This is an important feature should your PC crash or fail. You may also utilize the USB flash drive, if desired, for Dual User Authentication. This requires the user to not only enter the Master Pass Phrase, but also to plug the USB flash drive into their computer. Easy to use, backed award winning CyberScrub Customer Support.</description>
		<content:encoded><![CDATA[<p>CyberScrub KeyChain is a free password manager we use at work. <a href="http://www.cyberscrub.com" rel="nofollow">http://www.cyberscrub.com</a><br />
I found this on their website:<br />
Manage ALL Passwords with One Phrase. When you log on to KeyChain with your Master Pass Phrase you will have instant access to all of your password protected websites. Select your destination from a special list you have created- then simply &#8220;Click &amp; Go&#8221;. It&#8217;s that easy! Each time you visit a site requiring a user name and password KeyChain auto enters this information and logs you in. It even prompts you to add these passwords to the program if you have not already done so. Never manually fill in credit card details again. Online shopping is a snap because KeyChain automatically enters your selected credit card details, Shipping and Billing address and more. All of your data is secured with strong encryption. Only you have access to the sensitive data within KeyChain. All information, including passwords, credit cards and other data, is protected with strong encryption algorithms. The USB flash drive also synchronizes with your host computer to back up your encrypted password list. This is an important feature should your PC crash or fail. You may also utilize the USB flash drive, if desired, for Dual User Authentication. This requires the user to not only enter the Master Pass Phrase, but also to plug the USB flash drive into their computer. Easy to use, backed award winning CyberScrub Customer Support.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Password sicure &#124; SocInf</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-8655</link>
		<dc:creator>Password sicure &#124; SocInf</dc:creator>
		<pubDate>Fri, 18 Nov 2005 00:42:53 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-8655</guid>
		<description>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questa pagina.   Permalink &#124; Print   			Categorie 			Etica Tecnologica 						Ta [...]</description>
		<content:encoded><![CDATA[<p>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questa pagina.   Permalink | Print   			Categorie 			Etica Tecnologica 						Ta [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sneaky Smokie</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5489</link>
		<dc:creator>Sneaky Smokie</dc:creator>
		<pubDate>Wed, 13 Apr 2005 13:37:02 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5489</guid>
		<description>This is a little idea i came up with. Since most places i use passwords have a button to click to e-mail your password remembering them dosn&#039;t have to be a big choir. I use cd key&#039;s as passwords and might change the letters to captiols. Good idea for me cause its already written down on the cd case. 2104-92892664-4877 just drop in a few letters and your good to go. login: 2104acdw password: 9a28b826c64

try to use 8 or more numbers or letters. cd keys with numbers and letters are best to use.

xup8-gab8-tax5-gad7-6632
login: xup8gab8 password: tax5gad7</description>
		<content:encoded><![CDATA[<p>This is a little idea i came up with. Since most places i use passwords have a button to click to e-mail your password remembering them dosn&#8217;t have to be a big choir. I use cd key&#8217;s as passwords and might change the letters to captiols. Good idea for me cause its already written down on the cd case. 2104-92892664-4877 just drop in a few letters and your good to go. login: 2104acdw password: 9a28b826c64</p>
<p>try to use 8 or more numbers or letters. cd keys with numbers and letters are best to use.</p>
<p>xup8-gab8-tax5-gad7-6632<br />
login: xup8gab8 password: tax5gad7</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SocInf  &#187; Blog Archive   &#187; Password sicure</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5102</link>
		<dc:creator>SocInf  &#187; Blog Archive   &#187; Password sicure</dc:creator>
		<pubDate>Mon, 21 Feb 2005 17:13:18 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5102</guid>
		<description>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questo sito.  	 							 			 				 					Pubblicato il 21 Febbraio 2005 alle 18:14 [...]</description>
		<content:encoded><![CDATA[<p>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questo sito.  	 							 			 				 					Pubblicato il 21 Febbraio 2005 alle 18:14 [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: rydel.net</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4960</link>
		<dc:creator>rydel.net</dc:creator>
		<pubDate>Sun, 06 Feb 2005 01:36:56 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4960</guid>
		<description>Leszek Swirski wrote in to say...
&quot;Personally, since I&quot;m Polish, I just use obscure Polish words that no-one will ever be able to remember, let alone spell properly.&quot;

Same here (but with Blr.).
A neighbour from Belarus. ;)</description>
		<content:encoded><![CDATA[<p>Leszek Swirski wrote in to say&#8230;<br />
&#8220;Personally, since I&#8221;m Polish, I just use obscure Polish words that no-one will ever be able to remember, let alone spell properly.&#8221;</p>
<p>Same here (but with Blr.).<br />
A neighbour from Belarus. ;)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: The Engineered Boulderer</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4955</link>
		<dc:creator>The Engineered Boulderer</dc:creator>
		<pubDate>Sat, 05 Feb 2005 15:54:38 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4955</guid>
		<description>&lt;strong&gt;Secure Passwords&lt;/strong&gt;
I often read Matt Howie&#8217;s &#8220;A Whole Lotta Nothing:http://a.wholelottanothing.org/ and stumbled onto his post on Creating (and remembering) crazy hard passwords. In it he outlines how he makes secure but easily rememberable passwords. In it h...</description>
		<content:encoded><![CDATA[<p><strong>Secure Passwords</strong><br />
I often read Matt Howie&#8217;s &#8220;A Whole Lotta Nothing:http://a.wholelottanothing.org/ and stumbled onto his post on Creating (and remembering) crazy hard passwords. In it he outlines how he makes secure but easily rememberable passwords. In it h&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jussi Kukkonen</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4942</link>
		<dc:creator>Jussi Kukkonen</dc:creator>
		<pubDate>Fri, 04 Feb 2005 23:29:43 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4942</guid>
		<description>Lucas: &quot;zxcvbnm&quot; most definitely &lt;strong&gt;is&lt;/strong&gt; in every brute-force-dictionary.</description>
		<content:encoded><![CDATA[<p>Lucas: &#8220;zxcvbnm&#8221; most definitely <strong>is</strong> in every brute-force-dictionary.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Peter Cooper</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4939</link>
		<dc:creator>Peter Cooper</dc:creator>
		<pubDate>Fri, 04 Feb 2005 22:01:54 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4939</guid>
		<description>If you really can&#039;t pull yourself to these mneomic tricks, then you can always use some regular punctuation with your weak dictionary passwords. If your password is fish, then &quot;fish!&quot; (quotes included) is a lot harder to crack, and very few people seem to use passwords like this. Another easy method is to alternate CaSeS LiKe ThIs and then put an exclamation on the end. PaSsWoRd! anyone? :)</description>
		<content:encoded><![CDATA[<p>If you really can&#8217;t pull yourself to these mneomic tricks, then you can always use some regular punctuation with your weak dictionary passwords. If your password is fish, then &#8220;fish!&#8221; (quotes included) is a lot harder to crack, and very few people seem to use passwords like this. Another easy method is to alternate CaSeS LiKe ThIs and then put an exclamation on the end. PaSsWoRd! anyone? :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Engel</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4936</link>
		<dc:creator>David Engel</dc:creator>
		<pubDate>Fri, 04 Feb 2005 19:31:40 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4936</guid>
		<description>I documented this online once - though I&#039;ve lost where, so I&#039;ll need to get it back up - but it is still my favorite method of developing random appearing passwords:

Come up with a list of ten key events in your life that are memorable. If you can&#039;t get ten, but you have seven, that&#039;s a good start; in a few years you&#039;ll have more. Use your birthdate, the birthdate of your significant other, your children, when you started at your favorite employer, whatever. The fact that it is public knowledge is not necessarily a concern.

Convert each of these to a two-alpha/two-digit code. For example, &lt;a href=&quot;http://www.zeldman.com/daily/1004a.shtml&quot;&gt;Zeldman could use his daughter&#039;s birth&lt;/a&gt; and code it as &lt;code&gt;am28&lt;/code&gt;: Ava Marie born on the 28th. I don&#039;t know which significant event that would be for him, but say it is number 7. Your answers don&#039;t have to be real, either, and there are a ton of ways to remember each event. This is where the first pseudo-randomness comes in. They just have to be one&#039;s you can remember. Zeldman might use &lt;code&gt;av10&lt;/code&gt; for the announcement that came in October, or &lt;code&gt;ab04&lt;/code&gt;, or even &lt;code&gt;bg09&lt;/code&gt;.

After doing this with all of your events, you have a list from 0 to 9 of events with 4 character codes. Now just pick a two-three digit number, preferrably with unique digits, and a phrase which brings that number to mind. If it can be confusing, so much the better. For instance, one of my favorite is the phrase &quot;What is six times nine?&quot; pointing to the number 42 (thank you Doug Adams).

Then use the codes which go with these numbers. For example, &lt;code&gt;af70mg58&lt;/code&gt;. Using the shift key helps randomize it: &lt;code&gt;AF&amp;)mg58&lt;/code&gt;.

No dictionary attacks will ever hit it, even people who know me won&#039;t know which events I used or how I coded them, and after a few months, I pick a new number and new code. If I need a way to remember them, I can write down the remembrance phrase, and there is little evidence of what it is used for.</description>
		<content:encoded><![CDATA[<p>I documented this online once &#8211; though I&#8217;ve lost where, so I&#8217;ll need to get it back up &#8211; but it is still my favorite method of developing random appearing passwords:</p>
<p>Come up with a list of ten key events in your life that are memorable. If you can&#8217;t get ten, but you have seven, that&#8217;s a good start; in a few years you&#8217;ll have more. Use your birthdate, the birthdate of your significant other, your children, when you started at your favorite employer, whatever. The fact that it is public knowledge is not necessarily a concern.</p>
<p>Convert each of these to a two-alpha/two-digit code. For example, <a href="http://www.zeldman.com/daily/1004a.shtml">Zeldman could use his daughter&#8217;s birth</a> and code it as <code>am28</code>: Ava Marie born on the 28th. I don&#8217;t know which significant event that would be for him, but say it is number 7. Your answers don&#8217;t have to be real, either, and there are a ton of ways to remember each event. This is where the first pseudo-randomness comes in. They just have to be one&#8217;s you can remember. Zeldman might use <code>av10</code> for the announcement that came in October, or <code>ab04</code>, or even <code>bg09</code>.</p>
<p>After doing this with all of your events, you have a list from 0 to 9 of events with 4 character codes. Now just pick a two-three digit number, preferrably with unique digits, and a phrase which brings that number to mind. If it can be confusing, so much the better. For instance, one of my favorite is the phrase &#8220;What is six times nine?&#8221; pointing to the number 42 (thank you Doug Adams).</p>
<p>Then use the codes which go with these numbers. For example, <code>af70mg58</code>. Using the shift key helps randomize it: <code>AF&amp;)mg58</code>.</p>
<p>No dictionary attacks will ever hit it, even people who know me won&#8217;t know which events I used or how I coded them, and after a few months, I pick a new number and new code. If I need a way to remember them, I can write down the remembrance phrase, and there is little evidence of what it is used for.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4935</link>
		<dc:creator>Scott</dc:creator>
		<pubDate>Fri, 04 Feb 2005 17:52:09 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4935</guid>
		<description>Wow, a lot of different ideas on creating a password.  The suggestion about taking the first letter of each word from a phrase is one I would tell my users when I worked as a sysadmin.  They seemed to like the idea and it was easy for them to remember.  For myself, I typically take a word and replace letters with numbers or symbols that resemble the lette.  For instance, if my password was &#039;meyer&#039; it would become &#039;m3y3r&#039;.  Other examples; &#039;cascading&#039; becomes &#039;c@5c@d1ng&#039;, &#039;comment&#039; becomes &#039;c0mm3n7&#039;.</description>
		<content:encoded><![CDATA[<p>Wow, a lot of different ideas on creating a password.  The suggestion about taking the first letter of each word from a phrase is one I would tell my users when I worked as a sysadmin.  They seemed to like the idea and it was easy for them to remember.  For myself, I typically take a word and replace letters with numbers or symbols that resemble the lette.  For instance, if my password was &#8216;meyer&#8217; it would become &#8216;m3y3r&#8217;.  Other examples; &#8216;cascading&#8217; becomes &#8216;c@5c@d1ng&#8217;, &#8216;comment&#8217; becomes &#8216;c0mm3n7&#8242;.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01 Transitional//EN"
        "http://www.w3.org/TR/html4/loose.dtd">
<html>
<head profile="http://gmpg.org/xfn/1">
<title>meyerweb.com</title>
<link rel="openid.server" href="http://www.myopenid.com/server">
<link rel="openid.delegate" href="http://emeyer.myopenid.com/">
<meta http-equiv="Content-Type" content="text/html; charset=utf-8"><link rel="shortcut icon" href="/favicon.ico"><link rel="home" href="http://meyerweb.com/" title="Home" ><link rel="stylesheet" href="http://meyerweb.com/ui/meyerweb.css" type="text/css" media="screen, projection"><link rel="stylesheet" href="http://meyerweb.com/ui/theme.css" type="text/css" media="screen, projection" id="themeLink"><link rel="stylesheet" href="http://meyerweb.com/ui/print.css" type="text/css" media="print"><script src="http://meyerweb.com/ui/addresses.js" type="text/javascript"></script><link rel="stylesheet" href="/ui/wordpress.css" type="text/css" media="screen">
<link rel="stylesheet" href="/ui/tfe.css" type="text/css" media="screen">
<link rel="stylesheet" href="/ui/home.css" type="text/css" media="screen">
<link rel="alternate" type="application/rss+xml" title="Thoughts From Eric" href="/eric/thoughts/rss2/full" />
<link rel="alternate" type="application/rss+xml" title="Thoughts From Eric (only technical posts)" href="/eric/thoughts/category/tech/rss2/full" />
<link rel="alternate" type="application/rss+xml" title="Thoughts From Eric (only personal posts)" href="/eric/thoughts/category/personal/rss2/full" />
<link rel="alternate" type="application/rss+xml" title="Distractions" href="/eric/thoughts/recent-links/rss2" />
<link rel="alternate" type="application/rss+xml" title="Excuse of the Day" href="/feeds/excuse/rss20.xml" />
</head>
<body id="www-meyerweb-com" class="hpg">

<div id="sitemast"><h1><a href="/"><span>meyerweb</span>.com</a></h1></div><div id="search"><h4>Exploration</h4><!-- SiteSearch Google --><form method="get" action="http://www.google.com/custom" target="_top"><div><input type="hidden" name="domains" value="meyerweb.com"></input><label for="sbb" style="display: none">Submit search form</label><input type="submit" name="sa" value="Google Search" id="sbb"></input><label for="sbi" style="display: none">Enter your search terms</label><input type="text" name="q" size="31" maxlength="255" value="" id="sbi"></input><p><input type="radio" name="sitesearch" value="meyerweb.com" checked id="ss1"></input><label for="ss1" title="Search meyerweb.com">meyerweb.com</label><input type="radio" name="sitesearch" value="" id="ss0"></input><label for="ss0" title="Search the Web">Web</label></p><input type="hidden" name="client" value="pub-3772084027748653"></input><input type="hidden" name="forid" value="1"></input><input type="hidden" name="ie" value="ISO-8859-1"></input><input type="hidden" name="oe" value="ISO-8859-1"></input><input type="hidden" name="safe" value="active"></input><input type="hidden" name="cof" value="GALT:#008000;GL:1;DIV:#336699;VLC:663399;AH:center;BGC:FFFFFF;LBGC:336699;ALC:0000FF;LC:0000FF;T:000000;GFNT:0000FF;GIMP:0000FF;FORID:1"></input><input type="hidden" name="hl" value="en"></input></div></form><!-- SiteSearch Google --><!-- <form method="get" action="http://www.google.com/custom"><div><input type="submit" name="sa" value="Search"><input type="text" name="q" size="20" maxlength="255" value=""><input type="hidden" name="sitesearch" value="meyerweb.com"></div></form><small><a href="http://www.google.com/search">Powered by Google</a></small> --></div><div id="main"><div class="skipper">Skip to: <a href="#extra">site navigation/presentation</a></div><div class="skipper">Skip to: <a href="#thoughts">Thoughts From Eric</a></div>
<div id="thoughts">


<div class="entry">
<h3><a href="http://meyerweb.com/eric/thoughts/2005/01/31/password-production/" rel="bookmark" title="Permanent Link: Password Production">Password Production</a></h3>
<ul class="meta">
<li class="date">Mon 31 Jan 2005</li>
<li class="time">1441</li>
<li class="cat"><a href="http://meyerweb.com/eric/thoughts/category/general/" title="View all posts in General" rel="category tag">General</a><br> <a href="http://meyerweb.com/eric/thoughts/category/tech/" title="View all posts in Tech" rel="category tag">Tech</a></li>
<li class="cmt"><a href="http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comments">59 responses</a></li>
<li></li><li></li></ul>

<div class="text">
<p>
Since I&#8217;ve been futzing about with human-friendly security of various forms recently, it occurred to me that I ought to pass along a password-generation technique I&#8217;ve used for years now.  Maybe it&#8217;s a well known technique, and maybe not.  In any case, my best recollection is that I learned it from either John Sully or Jim Nauer back in my CWRU days.
</p>
<p>
The general idea is to pick a two-word combination you can easily remember.  For example, suppose you&#8217;re a big fan of pizza and Pepsi, and would have no trouble remembering those words.  Perfect: use them the basis of your password.  No, you don&#8217;t make it &#8220;pizzaPepsi&#8221;&#8212;instead, you interleave the words.  That would yield &#8220;pPiezpzsai&#8221;.  It looks fairly random, and yet is very easy to recreate because the seed words are so easy to remember.  If you have trouble remembering the exact sequence of letters, you can just write the words down on a piece of scrap paper and follow along.
</p>
<p>
In cases where your two words have different lengths, you can always tack on numbers.  For example, maybe your seed words are &#8220;milkshake&#8221; and &#8220;fries&#8221;.  That would normally yield &#8220;mfirlikesshake&#8221;, which is okay, but you could tack the numbers &#8220;123&#8243; onto &#8220;fries&#8221; to get &#8220;mfirlikessh1a2k3e&#8221;.  Alternatively, you could put the numbers at the beginning, so you get &#8220;m1i2l3kfsrhiaekse&#8221;.
</p>
<p>
I&#8217;ve found that when I start using a new password created this way, it takes me a few days to adapt to it.  I usually have the seed words written down some place handy during that training period.  Then my fingers take over, and from then on I can type it blindfolded in less than a second.  I don&#8217;t even think about the actual characters I&#8217;m typing: I just start, and the muscle memory kicks in.
</p>
<p>
So if you&#8217;re looking for a way to generate harder-to-crack passwords, there&#8217;s one possibility.  How about you&#8212;do you have any nifty human-friendly password-creation recipes?
</p></div>

</div>

</div>
<p style="font-size: 90%; text-align: right; margin-top: 0.5em; padding-top: 0;">(If you care, there's even an <a href="/eric/thoughts/page/2/">archive of previous thoughts</a>...)</p>

</div><div id="extra"><div class="panel" id="archipelago"><h4>Identity Archipelago</h4><ul><li><a href="http://flickr.com/photos/meyerweb/" rel="me">Flickr</a></li><li><a href="http://twitter.com/meyerweb/" rel="me">Twitter</a></li><li><a href="http://dopplr.com/traveller/meyerweb">Dopplr</a></li><li><a href="http://www.linkedin.com/in/meyerweb" rel="me">LinkedIn</a></li><li><a href="http://technorati.com/profile/emeyer" rel="me">Technorati</a></li></ul></div><div class="panel" id="pointers"><h4>Projects Elsewhere</h4><ul><li><a href="http://aneventapart.com/">An Event Apart</a></li><li><a href="http://complexspiral.com/">Complex Spiral Consulting</a></li><li><a href="http://www.webassist.com/go/css/emeyer/">CSS Sculptor</a></li><li><a href="http://css-discuss.org/">css-discuss</a></li><li><a href="http://microformats.org/">Microformats</a></li><li><a href="http://s5project.org/">S5</a></li></ul></div><div class="panel" id="tour"><ul><li><a href="http://fray.com/issue3/"><img src="http://fray.com/images/i3c.gif" alt="Fray Contributor (Issue 3: Sex &amp; Death)" /></a></li><!-- <li><a href="http://www.webassist.com/go/css/emeyer/"><img src="/pix/CS_ad_180x109.jpg" alt="CSS Sculptor for Dreamweaver" style="max-width: 100%;" /></a></li> --></ul></div><div class="panel">
<h4>Recently Tweeted</h4>
<p class="more"><a href="http://twitter.com/meyerweb">see more</a></p>
<p>Spent the afternoon manhandling a rototiller whose clutch design was exactly the inverse of anything resembling reasonable or safe. <small>&#8211;tweeted 3 hours, 54 minutes ago</small></p>
</div><div id="sideblog" class="panel">
<h4>Distractions</h4>
<p class="more">
<a href="/eric/thoughts/recent-links/">archive</a>
</p>
<ul>
<li><a href="http://tweetagewasteland.com/2010/03/my-head-is-in-the-cloud/" title="March 18 | &#8220;I sense that my addiction to the realtime stream is only making room for the consumption of a faster stream.&#8221;">My Head is in the Cloud</a> <small>[via <a href="http://daringfireball.net/">John</a>]</small></li>
<li><a href="http://8bitnyc.com/" title="March 17 | All of a sudden I want to establish a mission in Central Park and negotiate with the natives for gold and food.">8-Bit NYC</a></li>
<li><a href="http://www.youtube.com/watch?v=nFicqklGuB0&amp;feature=player_embedded" title="March 12 | Wry comment expressing my appreciation of the creative derivativeness of this video and its uncanny accuracy in mocking common tropes.">Academy Award Winning Movie Trailer</a></li>
<li><a href="http://www.youtube.com/watch?v=414TmP12WAU" title="March 9 | &#8220;Apple juice&#8230; for half price!&#8221;  More like twice PRICELESS.  (Note: If you&#8217;re at work, don your headphones.)">Happy in Paraguay</a> <small>[via <a href="http://unstoppablerobotninja.com/">Ethan</a>]</small></li>
<li><a href="http://www.youtube.com/watch?v=9V5ubAOeOBk&amp;feature=player_embedded" title="February 10 | This is approximately the best thing ever.">U900 -Walk Don&#8217;t Run (Isogabamaware)</a></li>
<li><a href="http://www.456bereastreet.com/archive/201002/sifr_default_css_hides_content_from_at_least_one_screen_reader/?utm_source=feedburner&amp;utm_medium=feed&amp;utm_campaign=Feed%3A 456bereastreet %28456 Berea Street%29" title="February 8 | -9999px comes through again, but I really wish we were beyond that kind of thing.">sIFR default CSS hides content from at least one screen reader</a></li>
<li><a href="http://www.macosxhints.com/article.php?story=20100117064356428" title="February 8 | Storing this for future use.">Take a picture with the iSight camera when a folder is opened</a></li>
<li><a href="http://mingle2.com/blog/view/web-developer-mind" title="February 4 | Mostly valid.  (SEE WHAT I DID THERE?)">The Mind of a Web Developer: An Illustrated Diagram</a></li>
<li><a href="http://www.theonion.com/content/news/science_channel_refuses_to_dumb" title="January 28 | &#8220;Punkin Chunkin, for Christ&#8217;s sake&#8230; What more do you people want?&#8221;">Science Channel Refuses To Dumb Down Science Any Further</a></li>
<li><a href="http://www.mailchimp.com/blog/project-omnivore-declassified/" title="January 27 | Sounds like quite a feat.  But I wonder how we&#8217;d feel if Microsoft or Google announced the same kind of thing on their e-mail services.">MailChimp&#8217;s Project Omnivore: Declassified</a></li>
<li><a href="http://www.politifact.com/truth-o-meter/statements/2010/jan/25/carolyn-maloney/congresswoman-says-democratic-presidents-create-mo/" title="January 26 | &#8220;Obviously, luck matters a lot, but when there is a consistent pattern over more than 60 years, it starts to look like more than just luck.&#8221;">Congresswoman says Democratic presidents create more private-sector jobs</a></li>
<li><a href="http://www.ted.com/talks/taylor_mali_what_teachers_make.html" title="January 25 | Truth.">Taylor Mali: What teachers make</a></li>
<li><a href="http://notebook.johnmartz.com/how-websites-work?c=1" title="January 22 | At last, the truth is out and I can stop pretending:  beatific monkeys are what makes it all go.">How websites work</a></li>
</ul>
</div>
<div class="panel" id="advisory">
<div class="guarded">
<a href="http://blogadvisorysystem.com/"><img src="/pix/bas/guarded.png" alt="Blog Advisory System Alert Level: Guarded"></a>
</div>
</div>

<div class="panel" id="excuse">
<h4>The <a href="/feeds/excuse/">excuse of the day</a> is</h4>
<p>Internet 1 traffic is being routed onto Internet 2</p>
</div>

<div class="panel" id="extras">
<h4>Extras</h4>
<ul>
<li><a href="/feeds/">Feeds</a> &#8226;</li>
<li><a href="/eric/faq.html">FAQ</a> &#8226;</li>
<li><a href="/family.html">Family</a></li>
</ul>
</div>

</div>

<div id="navigate">
<h4>Navigation</h4>
<ul id="navlinks">
<li id="archLink"><a href="/eric/thoughts/">Archives</a></li>
<li id="cssLink"><a href="/eric/css/">CSS</a></li>
<li id="toolsLink"><a href="/eric/tools/">Toolbox</a></li>
<li id="writeLink"><a href="/eric/writing.html">Writing</a></li>
<li id="speakLink"><a href="/eric/talks/">Speaking</a></li>
<li id="otherLink"><a href="/other/">Leftovers</a></li>
<li id="aboutsite"><a href="/ui/about.html">About this site</a></li>
</ul>
</div>

<div id="footer">
<p class="sosumi">All contents of this site, unless otherwise noted, are &copy;1995-2008 <strong>Eric A. and Kathryn S. Meyer</strong>.  All Rights Reserved.</p>
<p>"<a href="/eric/thoughts/">Thoughts From Eric</a>" is powered by the &uuml;bercool <a href="http://wordpress.org/">WordPress</a></p>
</div>
</body>
</html>
