<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Password Production</title>
	<atom:link href="http://meyerweb.com/index.php?year=2005&#038;monthnum=01&#038;day=31&#038;name=password-production&#038;feed=feed" rel="self" type="application/rss+xml" />
	<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/</link>
	<description>Things that Eric A. Meyer, CSS expert, writes about on his personal Web site; it&#039;s largely Web standards and Web technology, but also various bits of culture, politics, personal observations, and other miscellaneous stuff</description>
	<lastBuildDate>Thu, 24 May 2012 19:21:23 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.2</generator>
	<item>
		<title>By: &#187; Blog Archive &#187; Creating (and remembering) strong passwords</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-410960</link>
		<dc:creator>&#187; Blog Archive &#187; Creating (and remembering) strong passwords</dc:creator>
		<pubDate>Tue, 23 Sep 2008 22:56:16 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-410960</guid>
		<description>[...] Creating strong password doesn&#8217;t have to be a complicated procedure. I&#8217;m not using strings of arbitrary characters. You can get a good idea of some rules and practices here. [...]</description>
		<content:encoded><![CDATA[<p>[...] Creating strong password doesn&#8217;t have to be a complicated procedure. I&#8217;m not using strings of arbitrary characters. You can get a good idea of some rules and practices here. [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EricT</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-408323</link>
		<dc:creator>EricT</dc:creator>
		<pubDate>Thu, 11 Sep 2008 01:41:01 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-408323</guid>
		<description>i have a password generator that you all might find useful.
It is located on my personal site.
&lt;a href=&quot;http://eric.torvinen.net/password-generator.php&quot; rel=&quot;nofollow&quot;&gt;http://eric.torvinen.net/password-generator.php&lt;/a&gt;

Just type a word in the form and it will spit out the word in md5 and
crypt. 

it is meant for apache&#039;s htaccess files but i guess it creates harder passwords. and if you forget it you can always retype the word i my form or another for like it and get the hash.

i would use md5 because it stays the same on all systems. crypt changes every time, crypt encryptyion is used for unix/linux boxes.</description>
		<content:encoded><![CDATA[<p>i have a password generator that you all might find useful.<br />
It is located on my personal site.<br />
<a href="http://eric.torvinen.net/password-generator.php" rel="nofollow">http://eric.torvinen.net/password-generator.php</a></p>
<p>Just type a word in the form and it will spit out the word in md5 and<br />
crypt. </p>
<p>it is meant for apache&#8217;s htaccess files but i guess it creates harder passwords. and if you forget it you can always retype the word i my form or another for like it and get the hash.</p>
<p>i would use md5 because it stays the same on all systems. crypt changes every time, crypt encryptyion is used for unix/linux boxes.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: LifeHacker, Dansk Produktivitets - og Softwareguide.</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-103458</link>
		<dc:creator>LifeHacker, Dansk Produktivitets - og Softwareguide.</dc:creator>
		<pubDate>Thu, 08 Mar 2007 13:10:37 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-103458</guid>
		<description>[...] er svært at gætte for andre Trivielt ikke?, men på trods af dette har webeksperten Eric Meyer en metode til at finde det perfekte password: Vælg 2 ord du kan huske, og flet ordet ind i hinanden. Så [...]</description>
		<content:encoded><![CDATA[<p>[...] er svært at gætte for andre Trivielt ikke?, men på trods af dette har webeksperten Eric Meyer en metode til at finde det perfekte password: Vælg 2 ord du kan huske, og flet ordet ind i hinanden. Så [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: EnigmA-X&#8217;s blog &#187; Password&#8230;anyone?</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-88321</link>
		<dc:creator>EnigmA-X&#8217;s blog &#187; Password&#8230;anyone?</dc:creator>
		<pubDate>Mon, 05 Feb 2007 16:39:01 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-88321</guid>
		<description>[...] mijn zoektocht kwam ik deze site tegen. Misschien is de content wat oud (jan. 2005), maar het idee en de comments eronder zijn [...]</description>
		<content:encoded><![CDATA[<p>[...] mijn zoektocht kwam ik deze site tegen. Misschien is de content wat oud (jan. 2005), maar het idee en de comments eronder zijn [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WSA</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12168</link>
		<dc:creator>WSA</dc:creator>
		<pubDate>Wed, 11 Jan 2006 19:34:18 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12168</guid>
		<description>That URL should be: http://www.cyberscrub.com/keychain
Sorry about that :)</description>
		<content:encoded><![CDATA[<p>That URL should be: <a href="http://www.cyberscrub.com/keychain" rel="nofollow">http://www.cyberscrub.com/keychain</a><br />
Sorry about that :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: WSA</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12167</link>
		<dc:creator>WSA</dc:creator>
		<pubDate>Wed, 11 Jan 2006 19:33:27 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-12167</guid>
		<description>CyberScrub KeyChain is a free password manager we use at work. http://www.cyberscrub.com
I found this on their website:
Manage ALL Passwords with One Phrase. When you log on to KeyChain with your Master Pass Phrase you will have instant access to all of your password protected websites. Select your destination from a special list you have created- then simply &quot;Click &amp; Go&quot;. It&#039;s that easy! Each time you visit a site requiring a user name and password KeyChain auto enters this information and logs you in. It even prompts you to add these passwords to the program if you have not already done so. Never manually fill in credit card details again. Online shopping is a snap because KeyChain automatically enters your selected credit card details, Shipping and Billing address and more. All of your data is secured with strong encryption. Only you have access to the sensitive data within KeyChain. All information, including passwords, credit cards and other data, is protected with strong encryption algorithms. The USB flash drive also synchronizes with your host computer to back up your encrypted password list. This is an important feature should your PC crash or fail. You may also utilize the USB flash drive, if desired, for Dual User Authentication. This requires the user to not only enter the Master Pass Phrase, but also to plug the USB flash drive into their computer. Easy to use, backed award winning CyberScrub Customer Support.</description>
		<content:encoded><![CDATA[<p>CyberScrub KeyChain is a free password manager we use at work. <a href="http://www.cyberscrub.com" rel="nofollow">http://www.cyberscrub.com</a><br />
I found this on their website:<br />
Manage ALL Passwords with One Phrase. When you log on to KeyChain with your Master Pass Phrase you will have instant access to all of your password protected websites. Select your destination from a special list you have created- then simply &#8220;Click &amp; Go&#8221;. It&#8217;s that easy! Each time you visit a site requiring a user name and password KeyChain auto enters this information and logs you in. It even prompts you to add these passwords to the program if you have not already done so. Never manually fill in credit card details again. Online shopping is a snap because KeyChain automatically enters your selected credit card details, Shipping and Billing address and more. All of your data is secured with strong encryption. Only you have access to the sensitive data within KeyChain. All information, including passwords, credit cards and other data, is protected with strong encryption algorithms. The USB flash drive also synchronizes with your host computer to back up your encrypted password list. This is an important feature should your PC crash or fail. You may also utilize the USB flash drive, if desired, for Dual User Authentication. This requires the user to not only enter the Master Pass Phrase, but also to plug the USB flash drive into their computer. Easy to use, backed award winning CyberScrub Customer Support.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Password sicure &#124; SocInf</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-8655</link>
		<dc:creator>Password sicure &#124; SocInf</dc:creator>
		<pubDate>Fri, 18 Nov 2005 00:42:53 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-8655</guid>
		<description>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questa pagina.   Permalink &#124; Print   			Categorie 			Etica Tecnologica 						Ta [...]</description>
		<content:encoded><![CDATA[<p>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questa pagina.   Permalink | Print   			Categorie 			Etica Tecnologica 						Ta [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Sneaky Smokie</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5489</link>
		<dc:creator>Sneaky Smokie</dc:creator>
		<pubDate>Wed, 13 Apr 2005 13:37:02 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5489</guid>
		<description>This is a little idea i came up with. Since most places i use passwords have a button to click to e-mail your password remembering them dosn&#039;t have to be a big choir. I use cd key&#039;s as passwords and might change the letters to captiols. Good idea for me cause its already written down on the cd case. 2104-92892664-4877 just drop in a few letters and your good to go. login: 2104acdw password: 9a28b826c64

try to use 8 or more numbers or letters. cd keys with numbers and letters are best to use.

xup8-gab8-tax5-gad7-6632
login: xup8gab8 password: tax5gad7</description>
		<content:encoded><![CDATA[<p>This is a little idea i came up with. Since most places i use passwords have a button to click to e-mail your password remembering them dosn&#8217;t have to be a big choir. I use cd key&#8217;s as passwords and might change the letters to captiols. Good idea for me cause its already written down on the cd case. 2104-92892664-4877 just drop in a few letters and your good to go. login: 2104acdw password: 9a28b826c64</p>
<p>try to use 8 or more numbers or letters. cd keys with numbers and letters are best to use.</p>
<p>xup8-gab8-tax5-gad7-6632<br />
login: xup8gab8 password: tax5gad7</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: SocInf  &#187; Blog Archive   &#187; Password sicure</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5102</link>
		<dc:creator>SocInf  &#187; Blog Archive   &#187; Password sicure</dc:creator>
		<pubDate>Mon, 21 Feb 2005 17:13:18 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-5102</guid>
		<description>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questo sito.  	 							 			 				 					Pubblicato il 21 Febbraio 2005 alle 18:14 [...]</description>
		<content:encoded><![CDATA[<p>[...] ere perfezionato adottando pochi e semplici accorgimenti, uno dei quali viene descritto in questo sito.  	 							 			 				 					Pubblicato il 21 Febbraio 2005 alle 18:14 [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: rydel.net</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4960</link>
		<dc:creator>rydel.net</dc:creator>
		<pubDate>Sun, 06 Feb 2005 01:36:56 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4960</guid>
		<description>Leszek Swirski wrote in to say...
&quot;Personally, since I&quot;m Polish, I just use obscure Polish words that no-one will ever be able to remember, let alone spell properly.&quot;

Same here (but with Blr.).
A neighbour from Belarus. ;)</description>
		<content:encoded><![CDATA[<p>Leszek Swirski wrote in to say&#8230;<br />
&#8220;Personally, since I&#8221;m Polish, I just use obscure Polish words that no-one will ever be able to remember, let alone spell properly.&#8221;</p>
<p>Same here (but with Blr.).<br />
A neighbour from Belarus. ;)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: The Engineered Boulderer</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4955</link>
		<dc:creator>The Engineered Boulderer</dc:creator>
		<pubDate>Sat, 05 Feb 2005 15:54:38 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4955</guid>
		<description>&lt;strong&gt;Secure Passwords&lt;/strong&gt;
I often read Matt Howie&#8217;s &#8220;A Whole Lotta Nothing:http://a.wholelottanothing.org/ and stumbled onto his post on Creating (and remembering) crazy hard passwords. In it he outlines how he makes secure but easily rememberable passwords. In it h...</description>
		<content:encoded><![CDATA[<p><strong>Secure Passwords</strong><br />
I often read Matt Howie&#8217;s &#8220;A Whole Lotta Nothing:<a href="http://a.wholelottanothing.org/" rel="nofollow">http://a.wholelottanothing.org/</a> and stumbled onto his post on Creating (and remembering) crazy hard passwords. In it he outlines how he makes secure but easily rememberable passwords. In it h&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jussi Kukkonen</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4942</link>
		<dc:creator>Jussi Kukkonen</dc:creator>
		<pubDate>Fri, 04 Feb 2005 23:29:43 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4942</guid>
		<description>Lucas: &quot;zxcvbnm&quot; most definitely &lt;strong&gt;is&lt;/strong&gt; in every brute-force-dictionary.</description>
		<content:encoded><![CDATA[<p>Lucas: &#8220;zxcvbnm&#8221; most definitely <strong>is</strong> in every brute-force-dictionary.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Peter Cooper</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4939</link>
		<dc:creator>Peter Cooper</dc:creator>
		<pubDate>Fri, 04 Feb 2005 22:01:54 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4939</guid>
		<description>If you really can&#039;t pull yourself to these mneomic tricks, then you can always use some regular punctuation with your weak dictionary passwords. If your password is fish, then &quot;fish!&quot; (quotes included) is a lot harder to crack, and very few people seem to use passwords like this. Another easy method is to alternate CaSeS LiKe ThIs and then put an exclamation on the end. PaSsWoRd! anyone? :)</description>
		<content:encoded><![CDATA[<p>If you really can&#8217;t pull yourself to these mneomic tricks, then you can always use some regular punctuation with your weak dictionary passwords. If your password is fish, then &#8220;fish!&#8221; (quotes included) is a lot harder to crack, and very few people seem to use passwords like this. Another easy method is to alternate CaSeS LiKe ThIs and then put an exclamation on the end. PaSsWoRd! anyone? :)</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: David Engel</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4936</link>
		<dc:creator>David Engel</dc:creator>
		<pubDate>Fri, 04 Feb 2005 19:31:40 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4936</guid>
		<description>I documented this online once - though I&#039;ve lost where, so I&#039;ll need to get it back up - but it is still my favorite method of developing random appearing passwords:

Come up with a list of ten key events in your life that are memorable. If you can&#039;t get ten, but you have seven, that&#039;s a good start; in a few years you&#039;ll have more. Use your birthdate, the birthdate of your significant other, your children, when you started at your favorite employer, whatever. The fact that it is public knowledge is not necessarily a concern.

Convert each of these to a two-alpha/two-digit code. For example, &lt;a href=&quot;http://www.zeldman.com/daily/1004a.shtml&quot;&gt;Zeldman could use his daughter&#039;s birth&lt;/a&gt; and code it as &lt;code&gt;am28&lt;/code&gt;: Ava Marie born on the 28th. I don&#039;t know which significant event that would be for him, but say it is number 7. Your answers don&#039;t have to be real, either, and there are a ton of ways to remember each event. This is where the first pseudo-randomness comes in. They just have to be one&#039;s you can remember. Zeldman might use &lt;code&gt;av10&lt;/code&gt; for the announcement that came in October, or &lt;code&gt;ab04&lt;/code&gt;, or even &lt;code&gt;bg09&lt;/code&gt;.

After doing this with all of your events, you have a list from 0 to 9 of events with 4 character codes. Now just pick a two-three digit number, preferrably with unique digits, and a phrase which brings that number to mind. If it can be confusing, so much the better. For instance, one of my favorite is the phrase &quot;What is six times nine?&quot; pointing to the number 42 (thank you Doug Adams).

Then use the codes which go with these numbers. For example, &lt;code&gt;af70mg58&lt;/code&gt;. Using the shift key helps randomize it: &lt;code&gt;AF&amp;)mg58&lt;/code&gt;.

No dictionary attacks will ever hit it, even people who know me won&#039;t know which events I used or how I coded them, and after a few months, I pick a new number and new code. If I need a way to remember them, I can write down the remembrance phrase, and there is little evidence of what it is used for.</description>
		<content:encoded><![CDATA[<p>I documented this online once &#8211; though I&#8217;ve lost where, so I&#8217;ll need to get it back up &#8211; but it is still my favorite method of developing random appearing passwords:</p>
<p>Come up with a list of ten key events in your life that are memorable. If you can&#8217;t get ten, but you have seven, that&#8217;s a good start; in a few years you&#8217;ll have more. Use your birthdate, the birthdate of your significant other, your children, when you started at your favorite employer, whatever. The fact that it is public knowledge is not necessarily a concern.</p>
<p>Convert each of these to a two-alpha/two-digit code. For example, <a href="http://www.zeldman.com/daily/1004a.shtml">Zeldman could use his daughter&#8217;s birth</a> and code it as <code>am28</code>: Ava Marie born on the 28th. I don&#8217;t know which significant event that would be for him, but say it is number 7. Your answers don&#8217;t have to be real, either, and there are a ton of ways to remember each event. This is where the first pseudo-randomness comes in. They just have to be one&#8217;s you can remember. Zeldman might use <code>av10</code> for the announcement that came in October, or <code>ab04</code>, or even <code>bg09</code>.</p>
<p>After doing this with all of your events, you have a list from 0 to 9 of events with 4 character codes. Now just pick a two-three digit number, preferrably with unique digits, and a phrase which brings that number to mind. If it can be confusing, so much the better. For instance, one of my favorite is the phrase &#8220;What is six times nine?&#8221; pointing to the number 42 (thank you Doug Adams).</p>
<p>Then use the codes which go with these numbers. For example, <code>af70mg58</code>. Using the shift key helps randomize it: <code>AF&amp;)mg58</code>.</p>
<p>No dictionary attacks will ever hit it, even people who know me won&#8217;t know which events I used or how I coded them, and after a few months, I pick a new number and new code. If I need a way to remember them, I can write down the remembrance phrase, and there is little evidence of what it is used for.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Scott</title>
		<link>http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4935</link>
		<dc:creator>Scott</dc:creator>
		<pubDate>Fri, 04 Feb 2005 17:52:09 +0000</pubDate>
		<guid isPermaLink="false">http://meyerweb.com/eric/thoughts/2005/01/31/password-production/#comment-4935</guid>
		<description>Wow, a lot of different ideas on creating a password.  The suggestion about taking the first letter of each word from a phrase is one I would tell my users when I worked as a sysadmin.  They seemed to like the idea and it was easy for them to remember.  For myself, I typically take a word and replace letters with numbers or symbols that resemble the lette.  For instance, if my password was &#039;meyer&#039; it would become &#039;m3y3r&#039;.  Other examples; &#039;cascading&#039; becomes &#039;c@5c@d1ng&#039;, &#039;comment&#039; becomes &#039;c0mm3n7&#039;.</description>
		<content:encoded><![CDATA[<p>Wow, a lot of different ideas on creating a password.  The suggestion about taking the first letter of each word from a phrase is one I would tell my users when I worked as a sysadmin.  They seemed to like the idea and it was easy for them to remember.  For myself, I typically take a word and replace letters with numbers or symbols that resemble the lette.  For instance, if my password was &#8216;meyer&#8217; it would become &#8216;m3y3r&#8217;.  Other examples; &#8216;cascading&#8217; becomes &#8216;c@5c@d1ng&#8217;, &#8216;comment&#8217; becomes &#8216;c0mm3n7&#8242;.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
<!-- WP Super Cache is installed but broken. The path to wp-cache-phase1.php in wp-content/advanced-cache.php must be fixed! -->
