Diesal
Expert Member
personally my favorite password is qwerty.
(this is not my MyBroadband password obviously)
(this is not my MyBroadband password obviously)
-
Join the MyBroadband community
South Africa’s biggest forum. Discuss, discover, and connect with thousands of members.
-
Question of the Day: How do you normally pay for purchases in stores?
Worst passwords in the world
- Thread starter jes
- Start date
Arthur
Honorary Master
I mostly use pdarsosw quite often. Easy to remember because it's "password" written 1st-letter, last letter, 2nd letter, 2nd-last letter, etc.
Jabberwocky
Expert Member
hell no!
i`m gaving trouble remembering on which sites I capitalised the first letter, and put a 1 afterwards.
Last edited:
It is stupid to encourage people to change their password regularly. That just promotes using bad passwords. People are also simply not going to use strong passwords for every login they have unless they have a password manager, because it is impossible to remember them all.
There is also actually nothing wrong with writing down passwords as long as they're kept in a safe place.
There is also actually nothing wrong with writing down passwords as long as they're kept in a safe place.
Ouch. Or you can just use iCloud Keychain should you have an Apple device. One of the best enhancements to come with iOS 7 and OS X Mavericks.
redarrow
Expert Member
How often do people's bank accounts/other online accounts get hacked by crackers using brute force techniques compared to say phishing or virus/keylogging attacks?
I think the whole password complexity argument is over rated, I get irritated with websites that force things like "must have numbers and capital letters and some special characters". It doesn't matter if your password is a billion characters long if you fall for some stupid phishing attack or install random crap/open spam attachments and so on.
Of course using 'password' or '123456' is obviously a stupid idea.
I think the whole password complexity argument is over rated, I get irritated with websites that force things like "must have numbers and capital letters and some special characters". It doesn't matter if your password is a billion characters long if you fall for some stupid phishing attack or install random crap/open spam attachments and so on.
Of course using 'password' or '123456' is obviously a stupid idea.
grim
Expert Member
If you can vouch for it then by all means. 
Another popular service is 1Password. Thank f**k I've moved away from my same "complex" password across a zillion sites, which I am aware is a big no-no.
Another popular service is 1Password. Thank f**k I've moved away from my same "complex" password across a zillion sites, which I am aware is a big no-no.
Last edited:
Nephew_
Senior Member
In reality, how many failed attempts does reputable sites allow? Lets say you want to hack into my gmail. I have an easy password like harry8. https://howsecureismypassword.net/ says it can be cracked in 0.5 s.
And it probably guessed names and numbers, but got there after about 5000 attempts. How does it know it is correct?
If you have a bot or something that try to login to gmail with every guess, how long will it take google to ban your IP.
I am quite sure it will not allow more than 20, 50 or even a 100 failed attempts.
So how much does complexity really mean here?
And it probably guessed names and numbers, but got there after about 5000 attempts. How does it know it is correct?
If you have a bot or something that try to login to gmail with every guess, how long will it take google to ban your IP.
I am quite sure it will not allow more than 20, 50 or even a 100 failed attempts.
So how much does complexity really mean here?
TrueSeeker
Honorary Master
- Joined
- May 20, 2010
- Messages
- 13,302
- Reaction score
- 18,353
It's a little scary that the report deals with a substantial number of medium to excellent passwords and they were still all compromised.
Sinbad
Honorary Master
- Joined
- Jun 5, 2006
- Messages
- 89,064
- Reaction score
- 41,845
Liar, I tried to login using the password above , it failed
Try it with House's account
Hamish McPanji
Honorary Master
The key is to gain access to the files/database that stores the passwords rather than the website. All the genuine hacking occurs in that way. That way you have ample time to crack online or directly on the db or admin script. Brute forcing a website maybe worked in the early 90's and will never work now (except COJ maybe)
A lot of websites will automatically block after 3-5 attempts, or at least start using captcha or similar security schemes to prevent a password
dualmeister
Honorary Master
https://howsecureismypassword.net/ says p@ssw0rdqazwsxedc will take:Ah ha :erm:
thefatcatjumpedoverthemoon = 3 octillion years
Last edited:
LazyLion
King of de Jungle
NeonNinja
Neon Resident
But most places require 8 character passwords.