Password strength

Last Updated : May 16, 2023 |
Prolog information
Metadata
Keywords:
Definition
A strong password is typically one that:
  • Is long (for example at least 8 characters)
  • Complex (for example contains upper, lower and numeric characters)
  • Does not contain sequences or repeated characters
  • Is not easily guessable. Guessable passwords include:
    • Password same as account name or extension number (or reversed)
    • Dictionary words
    • Dictionary words with number substitution
    • Backwards words
    • Personal or corporate information
    • Date of birth
    • Default passwords
A strong PIN/Login Code is typically one that:
  • Is long. A 13-digit PIN is similar in strength to an 8-character case-sensitive password
  • Does not contain sequences or repeated digits
  • Does not contain keypad sequences (for example 2580)
  • Is not easily guessable. Guessable PINs include:
    • PIN same as extension number (or reversed)
    • Personal or corporate information
    • Dates, prevalent when 4, 6 or 8 digit minimum length is enforced
    • Default login codes

Additional Information

Password and PIN strength and management is not covered in detail here, but many publications exist including:
Related links
Password and PIN Management