Password Security

Hey all!

One of the most basic tips of any website security (Especially MyBB) is that password of yours! I'm not just on about the password on your forum but that of your FTP, MySQL and if you have it Cpanel (or what ever alternative you have)

MyDoGIScoOl - Now to some people think this is fine, I can tell you this is not. With the most recent ways of brute forcing and cracking passwords, linking words is not a good idea! regardless if you have capitals! A good example would be ISDoGcoOlMy - Now you have muddled up the sentence it makes it that little bit harder to crack. Remember capitals is a good way to help secure it.

Numbers and special characters are also a very good way to slow down the cracking process. Taking the advice we already have, we are going to insert some numbers and special characters in replacement of letters. 12#D0#gc0@lmY! - Now that is going to really help make it a pain to get a hold of this!

Length is also an important factor, the letters in a password, the more attempts the cracker has to do to get the letters correct (brings me back to my point of not stringing words to make a sentence or phrase) a decent password in my books consists of 8 letters or more of Capitals, numbers, special characters and it makes no sense and has nothing to do with you personally.

So here are some top tips.

• Don't think because you have a good password on MyBB, your SQL, control panel and FTP are safe with 'mygodiscool'!
• Never link words to make a sentence
• Muddled up words are good
• Capitals are a mans best friend
• Special characters and numbers are also a mans best friend
• Do not leave this password on your PC, write it down and don't tell anyone about it!
  

I hope I offered a bit of simple advice, most of my security edits are done server end because that's how I got exploited, I know the feeling of having work taken from you and destroyed, it is a horrible one good luck everyone!


EDIT: Should really of done a search first! http://www.mybbsecurity.net/topic-passwo...-practices But hey,. if this thread is still helpful then feel free to leave it up :p

Thanks everybody starts somewhere.

(04-15-2012 11:53 PM).Mint Wrote:  EDIT: Should really of done a search first! http://www.mybbsecurity.net/topic-passwo...-practices But hey,. if this thread is still helpful then feel free to leave it up :p

I'd rather have two guides on the same topic than no topics at all.

Indeed I did cover most of this in my thread but I didn't mention specifically where the password security should be improved.