Users have gradually moved away from simple passwords such as 123456 or a pet's name, but their new choices may still be insufficient. Tricks intended to make passwords harder can instead create predictable patterns for online criminals.
What should you consider before creating a password?
Most of the time, passwords are stolen in attacks on the services that store them, and there is little users can do about that. Still, some very common mistakes stand out: certain patterns make our passwords more obvious than they seem. Three of these patterns are:
- One uppercase letter, three lowercase letters and four numbers, such as Pris1972.
- One uppercase letter, six lowercase letters and two numbers, such as Miguelf92.
- One uppercase letter, five lowercase letters and two numbers, such as Juanrb16.
The list continues with five common mistakes when choosing a new password. If these apply, consider changing it:
- Starting with an uppercase letter followed only by lowercase letters.
- Adding one or two letters to a word that is too short.
- Placing numbers only at the beginning or after the letters.
- Putting an exclamation mark at the end when a special character is required.
- Using only one special character.
The source also recommends avoiding logical words or phrases and, if necessary, using memorization techniques to remember access codes. This historical composition advice needs review against current password guidance.
