Guidelines for Strong Passwords

A strong password is one that is more secure by virtue of being difficult for a machine or a human to guess. Password strength can be achieved by incorporating the following characteristics; the more characteristics you incorporate into your password, the stronger it will be.

Characteristics of strong passwords

• At least 8 characters—the longer, the better
• A mixture of both uppercase and lowercase letters
• A mixture of letters and numbers
• Inclusion of at least one special character, e.g., ! @ # ? ]
  Note: do not use < or > in your password, as both can cause problems in Web browsers

A strong password is hard to guess, but it should be easy for you to remember—a password that has to be written down is not strong, no matter how many of the above characteristics are employed.

While all systems that use the Lafayette NetID and password for authentication support a password with the above characteristics, please note that other systems may not support similarly strong passwords. For example, a system may not recognize case, may have a limit on the number of characters, or may not allow special characters. ITS recommends that, in these situations, users incorporate as many strong password characteristics as the system will allow.

Examples of weak passwords

• Any word that can be found in a dictionary, in any language (e.g., airplane or aeroplano)
• A dictionary word with some letters simply replaced by numbers (e.g., a1rplan3 or aer0plan0)
• A repeated character or a series of characters (e.g., AAAAA or 12345)
• A keyboard series of characters (e.g., qwerty or poiuy)
• Personal information (e.g., birthdays, names of pets or friends, Social Security number, addresses)
• Anything that is written down and stored somewhere near your computer

Tips for keeping your password secure

• Change it regularly—once every three to six months
• Change it if you have the slightest suspicion that your password has become known by a human or a machine
• Never reuse it for accounts on other websites
• Never save it in a web form on a computer that you do not control or that is used by more than one person
• Never share it with anyone
• Never write it down

Tips for creating a strong password

Think of a word or phrase, then substitute letters for numbers and special characters. Mix the case of any remaining letters. For example:

• Snoopy and Woodstock becomes Sno0py&ws
• In the dog house becomes !nTh3dawgHs
• Let’s have dinner at 8:00 p.m. becomes Lhd@800pm

Think of a word and a number, then intersperse them and mix the letter case. For example, the name of your elementary school (Main Street Elementary) and your pet’s birth month and year (12/96) becomes m1A2/i9n6