00000nam 2200000za 4500 9.807269 CaOODSP 20240219183352 cr ||||||||||| 150723s2014 onc ob f000 0 eng d CaOODSP eng eng fre n-cn--- D68-2/27-2014E-PDF Salois, Martin. Password complexity recommendations [electronic resource] : “xez&pAxat8Um” or “P4$$w0rd!!!!”? / Martin Salois. [Ottawa] : Defence Research and Development Canada, 2014. vii, 18, [2] p. : fig., tables. Scientific report ; 2014-R27 October 2014. Includes bibliographical references. The password-cracking world is in turmoil. Many new technologies, such as graphic cards (e.g., NVidia CUDA or ATI/AMD GPUs), make easily available computing power that was previously reserved to very rich organizations. Many efficient tools followed using these technologies, for better or for worse. This report illustrates the type of performance one can obtain from a generic $2,000 computer and the lessons to learn on password length for different web sites and software programs. The larger conclusion is that an 11-character password, containing uppercase-lowercase-digits-symbols, is the ideal length for the foreseeable future when no other information is available. More characters are always better; less can be dangerous in the current state of the technology. The use of a password manager, a program that generates and manages strong, complex passwords, is strongly recommended. gccst Computer security Defence R&D Canada. Scientific report (Defence R&D Canada) 2014-R27 (CaOODSP)9.802305 PDF 335 KB https://publications.gc.ca/collections/collection_2015/rddc-drdc/D68-2-27-2014-eng.pdf DRDC-RDDC-2014-R27