Select a Secure Password

People who steal your password steal your identity. This may involve access to personal records, financial information, as well as performing illegal activities in your name. Prevent these problems by choosing a strong password.

• Has both upper and lower case letters
• Has digits and/or punctuation characters as well as letters
• Is easy to remember, so they do not have to be written down
• Is seven or eight characters long
• Can be typed quickly, so someone else cannot look over your shoulder

The ACCC password requirements were designed to help you choose "good passwords". While the details vary from one system to another, a password that is:

• up to 8 characters long, and
• has at least three letters, and
• has at least two characters which are not letters,

1. Make your password as long as possible. The longer it is, the more difficult it will be to attack the password with a brute-force search. Always use at least 7 characters in your password, at least two of which are non-alphabetic.
2. Use as many different characters as possible when forming your password. Use numbers, punctuation characters and, when possible, mixed upper and lower-case letters. Choosing characters from the largest possible alphabet will make your password more secure.
3. Change your password on a regular basis. Changing your password every 30 days is a good rule-of-thumb, and you should never go longer than 90 days before picking a new password. Do not reuse any previous password you have used. The longer you wait before changing passwords, the more difficult it will be to get used to the new one.

1. Do not use personal information in your password that someone else is likely to be able to figure out. Obviously, things like your name, phone number, and address are to be avoided. Even names of acquaintances and the like should not be used.
2. Do not use words, geographical names, or biographical names that are listed in standard dictionaries.
3. Never use a password that is the same as your account number.
4. Do not use passwords that are easy to spot while you're typing them in. Passwords like 12345, qwerty (i.e., all keys right next to each other), or nnnnnn should be avoided.

If you are having difficulty picking a good password, one good method is to use the first letter of each word in a phrase you can easily remember. For example, "McDonald's is your kind of place" would be miykop. Another method is to intentionally use misspelled words, or words with a number or punctuation mark suffixed. Examples include: braekfast, kite276, and weather. (the period at the end is part of the password). But, don't copy any of these examples!

• Your name
• Your spouse's name
• Your parent's name
• Your pet's name
• Your child's name
• Names of close friends or coworkers
• Names of your favorite fantasy characters
• Your boss's name
• Anybody's name
• The name of the operating system you're using
• The hostname of your computer
• Your phone number
• Your license plate number
• Any part of your social security number
• Anybody's birth date
• Other information that is easily obtained about you
• Words such as wizard, guru, gandalf, and so on.
• Any username on the computer in any form (as is, capitalized, etc.)
• A word in the English dictionary
• A word in a foreign dictionary
• A place
• A proper noun
• Passwords of all the same letter
• Simple patterns on the keyboard, like qwerty
• Any of the above spelled backwards
• Any of the above followed or prepended by a single digit

Did reading this page inspire you to change your password? You can change your tigger, icarus, or mailserv password the Web with the ACCC Password Change Utility. Or login to tigger, icarus, or borg and enter: passwd

[1] Simson Garfinkel and Gene Spafford, Practical UNIX Security (Sebastopol, CA: O'Reilly & Associates, Inc., 1991), p. 35.

[2] Ibid., pp. 33-34.