Password strength

Last Updated : May 16, 2023 |

Definition

A strong password is typically one that:

  • Is long (for example at least 8 characters)

  • Complex (for example contains upper, lower and numeric characters)

  • Does not contain sequences or repeated characters

  • Is not easily guessable. Guessable passwords include:

    • Password same as account name or extension number (or reversed)

    • Dictionary words

    • Dictionary words with number substitution

    • Backwards words

    • Personal or corporate information

    • Date of birth

    • Default passwords

A strong PIN/Login Code is typically one that:

  • Is long. A 13-digit PIN is similar in strength to an 8-character case-sensitive password

  • Does not contain sequences or repeated digits

  • Does not contain keypad sequences (for example 2580)

  • Is not easily guessable. Guessable PINs include:

    • PIN same as extension number (or reversed)

    • Personal or corporate information

    • Dates, prevalent when 4, 6 or 8 digit minimum length is enforced

    • Default login codes

Additional Information

Password and PIN strength and management is not covered in detail here, but many publications exist including: