I have a pretty good VBSscript password generator at
http://web.bai.org/pwdgen.vbs.txt. Copy the contents into a text file and
call it pwdgen.vbs.

It uses combinations of dictionary words and non-alphabetic characters to
produce strong (>40 bits of entropy) passwords that are easy to remember.

People say using dictionary words is bad, but that's not true if you use
them right. If you randomly pick 2 words from a 36,000 word dictionary, then
add two non-lowercase characters, you get 36,0000 * 36,000 * 68 * 68 = ~5.9
trillion combinations. Assuming you seed the random number generator well
(my script allows it) an attacker will have to try more than 2^41
combinations on average to brute-force your password. This is stronger than
an 8-character password made up of random letters and numbers, and is much
easier to remember. I got this idea from http://www.diceware.com.

My script will also generate really, really tough, completely random
passwords (>56 bits) if desired.


:::Ryan Malayter, MCSE
:::Bank Administration Institute
:::Chicago, Illinois, USA


> -----Original Message-----
> From: BY [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, January 07, 2002 5:56 AM
> To: MSWinNT Discussions
> Subject: RE: password
> 
> 
> Thanks Andrew. Hope I can find a good one. Which one do you use?
> 
> -----Original Message-----
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED]] On Behalf Of 
> Andrew S. Bounds
> Sent: Monday, 7 January 2002 10:53 PM
> To: MSWinNT Discussions
> Subject: RE: password
> 
> Anything under seven characters can be cracked in a laughable 
> amount of time. The password should contain at least alpha 
> and numeric characters. You can increase the complexity of 
> the password by using symbols and upper or lower case.
> 
> As far as formula, that would be a bad thing. There are a 
> couple random password generators available check your 
> favorite search engine.
> 
> Enjoy,
> 
> Andrew S. Bounds
> 
> 
> -----Original Message-----
> From: BY [mailto:[EMAIL PROTECTED]] 
> Sent: Monday, January 07, 2002 6:30 AM
> To: MSWinNT Discussions
> Subject: password
> 
> 
> 
> Hi there,
> 
> Is there a formula how to create a good administrator's 
> password? Each time I am setting up a new server, I am having 
> great difficulty to think of a good password. Any tips here 
> would be appreciated.
> 
> Thank you.
> 
> BY
> 
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> 
> 
> ------
> You are subscribed as [EMAIL PROTECTED]
> Archives: http://www.swynk.com/sitesearch/search.asp
> To unsubscribe send a blank email to [EMAIL PROTECTED]
> 

------
You are subscribed as [email protected]
Archives: http://www.swynk.com/sitesearch/search.asp
To unsubscribe send a blank email to [EMAIL PROTECTED]

Reply via email to