Comments on: Keep your data safe by following the Password Commandments

Ten rules for crafting and managing strong passwords that you don't have to worry about forgetting.

[Remo_Williams]

I call bullsh!# right now. Your first rule is stupid. Of COURSE you need to write down your passwords, but that list needs to be in your wallet, or your home safe, or some other secured location.

I have to keep track of two dozen passwords, 3/4 of which expire all the time and need to be changed. I'm not supposed to write these down? I'm supposed to trust a PC to handle this? What if I lose a HDD? Now my entire pwd management system is hostage to data recovery firms?

No thanks. Keep a laminated sheet in your wallet, or in a locked drawer somewhere.

[rnieves1977]

there are OS crackers that are easily downloaded from the net... you could use that to pop your box but in case you have so many passwords make them one of 5 passwords and rotate, that's what I do

[AK3700]

What?? And your wallet has no chance of being lost or stolen? Or you are on the road on your laptop and need to get to your password list in your safe? The best practice is not to write it anywhere, not on paper, not on your computer, and don't trust a program to keep track of it for you. Your head is the safest place. We all have a billion passwords to keep in our heads. Try coming up with a system that relates to the particular site so you can always figure it out. (like tip #2 above but convert that particular website into numbers, reverse them, etc).

[doreilly]

I repeat: Don't write down your passwords. Ever. If your company assigns you passwords, ask for permission to change them to your strong-password system. If you write them down, sooner or later somebody will find them.

Dennis

[dclaryjr]

Someone out to pass this to American Express. They only allow 8 character passwords on their website which is absurd. The more the better!!

[Louise_V]

@Remo_ Williams

Sure writing down your passwords is the safest idea - if done in invisible ink. If not, Password Commandment #9 (a reliable password manager) may actually replace Commandments 1-10!

I work for PassPack, a password manager and the commandments were all right on the mark and exactly the message that we try to put across to people. Check our homepage for a list of features:

http://www.passpack.com/info/home/

Choose and use a password manager.

Louise Vinciguerra

[Hoochieman]

I use Cute Password Manager to manage my web accounts, it's free.
http://www.cutepasswordmanager.com