March 2006

Some are 6 characters. Some are 12 characters. Some are alphanumeric. Some are the name of your long-lost pet. Others may be assigned to you. Whatever they may be, web passwords are growing increasingly common - and confusing. Are passwords really that important and, if so, how do I keep track of them all?

What is to be done about the growing annoyance of passwords? Should you write them down? When we think of writing our Internet passwords down on paper, horrific images of friends keeping their passwords on yellow post-it notes stuck to their monitor come to mind!

Yet, surprisingly, writing down passwords on paper is quickly becoming more and more appealing. Microsoft security guru Jasper Johansson claims written passwords are the best option: "I have 68 different passwords. If I am not allowed to write any of them down, guess what I am going to do? I am going to use the same password on every one of them."

However, using the same password for every system is the wrong method for two reasons. First, once anyone discovers what that password is, they can access all your secure information. Second, not all systems allow good passwords. Some require that you use only letters. A good password should be so complex that it is difficult to memorize.

Worthwhile Tip: Never use a word that could be found in the dictionary as a password. Dictionary attackers test passwords for every word in the dictionary until one works. Instead, choose alphanumeric passwords that combine numbers and letters.

Bottom Line: There is no perfect option. As long as there are people that want to crack into secure systems, the world of passwords will be complex. The best solution is to write down all your passwords but it is very important to maintain security of your physical list. Keeping it in your wallet or purse is a good idea. Keep another copy at home or in a safe just in case you lose your purse or wallet. Still don't feel secure? Change your passwords every 3-6 months. If you keep a list, you'll know which ones need to be changed.