As computer power gets cheaper it gets easier to crack passwords, suggests research.

 

The growing use of graphics cards as surrogate supercomputers could spell trouble for users of short passwords.

 

Researchers say the growing number of processors on graphics cards will soon make it trivial for them to crack short passwords. A password of seven characters or less will soon be "hopelessly inadequate" they claim.

 

The researchers suggest passwords should be at least 12 characters long to be safe. A team led by Richard Boyd from the Georgia Tech Research Institute has been investigating what effect the number-crunching power of modern graphics cards could have on the crackability of passwords.

 

Many graphics cards employ hundreds of so-called stream processors working in parallel to render images. Many scientists now use the basic arithmetical properties of these processors to help crunch through data generated during experiments. The number crunching abilities of graphics cards are now comparable to the multi-million dollar supercomputers built about a decade ago, said Mr Boyd.

 

The parallel processing systems inside graphics cards are very good at carrying out so-called "brute force" attacks that effectively try every possible combination of letters and numbers until the right one is found. Longer passwords take longer to crack and offer better protection, say the researchers.

 

"Right now we can confidently say that a seven-character password is hopelessly inadequate," said Mr Boyd, "and as GPU power continues to go up every year, the threat will increase."

 

A better alternative, he suggested, would be a 12-character combination of upper and lower case letters, symbols and digits.

 

Ultimately, suggest the researchers, users may be forced to rely on whole sentences that are a mix of different sorts of characters to ensure no-one else can guess their password and get at online services.

 

http://www.bbc.co.uk/news/technology-10963967

So I can't use qwertyuiop[] anymore? :(

i used a long password i use, on a place i registered recently and it said it was mid strong but not strong strong, when usually sites said my long password was strong strong secure

:|

Someone told me (I'm not going to break out into song, don't worry :P) that you should pick a letter on the keyboard's top row, for example R, then go down alternating capital and lowercase, then do it the other diagonal, then pick a number and use the number and its symbol, then the number before or after (or both) and its symbol. :thinking:

 

Example:

 

RdXrFv2@1!

 

The idea is that you remember it while it still being somewhat random. :shrug:

why start with the R?

i use another logical but i use as is recommended to make it strong, and no doubt with spanish keyboard it makes it better :p

Not necessarily an r, I just used it for an example.