Password Management PA Turnpike Commission

Creating Strong Passwords

Passwords must be: At least 8 characters in length. A mix of letters (uppercase and/or lowercase), numbers, and/or

special characters. Some people find that creating a passphrase is easier to remember

than a password. A passphrase is a complex password based on a memorable phrase, song or book title, line of poetry, etc.

Creating Strong Passwords

Passwords should not be: A word found in the dictionary, whether spelled forwards or

backwards, or a word preceded or followed by a digit (e.g., secret1, 1secret).

The User ID. Personal information, names of family, places, pets, birthdays,

address, hobbies, or any other information that could be associated with you.

Words that are slang, dialect, jargon, etc. Common keyboard sequences, such as "qwerty89" or "abc123”.

Creating Good Passphrases

Passwords should: Not be too common (2bor!2b is pretty common!). Be a phrase that has personal meaning but might not appear

widely. For example, the first line of your wedding vows (if you wrote

them yourself) would be memorable but not widely available. A random line from your favorite movie is good too.

Combine phrases to make them even stronger. Not be passphrases you have seen in print as examples.

Password Policy Issues

Passwords should not be written down or stored electronically. Choose passwords that you can remember without writing them down. If you do have to write something down, write a

hint that others won’t be able to decipher instead of

the complete password - and store it securely. Change initial passwords, password resets, and

default passwords the first time you log in. These passwords can be vulnerable to guessing or to the

automated programs that hackers employ to try to break into systems.

Verify that all of your passwords meet the password strength guidelines in this module. Change any that do not.

The different modules ofthis tutorial will:

Discuss the risks to your computer and the data it contains. Provide some guidelines for avoiding risks. Suggest some practical and easy solutions.

Please review these modules at your convenience.