Alert
Close

Watch the NASCAR race on Sunday at Texas Motor Speedway. Join the Drive to End Hunger!

Bits & Bytes
Poll

Most Popular
Articles

Viewed

Ask Sid

Keeping Secrets: Password Dos and Don'ts

Need another reason to guard your computer passwords? It's possible they could be cracked by eagle-eared identity thieves using a high-tech microphone that detects sound through glass.

“Depending on its keyboard location, each key emits a different sound—in much the same way a bongo drum does,” says computer scientist Doug Tygar of the University of California at Berkeley. These differences go unnoticed to the untrained ear, but Dr. Tygar and his colleague Li Zhuang used a $10 microphone to record keystrokes, then ran the sound of each through a software program originally designed to recognize human speech. By the third try, the program identified 96 percent of typed characters.

When assigned to decipher the keyboard recording of a 10-digit password, Dr. Tygar's doctored software came up with 75 possibilities. “That means if we tried all 75 passwords, we could break into that user’s account. 

“I cannot say this is being done, only that we have done this in the lab. We hope our experiment persuades manufacturers to produce keyboards that mask these sounds.” Given the easy availability of laser microphones that can record sound through windows across the street, Dr. Tygar is already tackling that task himself.

To keep your passwords unknown—and unknowable—follow these pointers:

  • Do combine parts of two unusual, unrelated words, such as “gastrocumulus” or “cytoplasticity.” The longer and stranger the better.

  • Do mix capital and lowercase characters, as well as symbols and numbers, in the middle of the password: f2reeDoMeYe#wTness, not freedomeyewitness.

  • Do use words from a foreign language in combo with an English word. Many hackers try to crack passwords with common words, or with those pooled from the dictionary database of a single language.

  • Don't use anything that can be easily guessed by neighbors, coworkers, or strangers who get their hands on your wallet—a nickname, child’s name, pet’s name, or your favorite sports team or hobby.

  • Don't use slightly different versions of the same password on different Web sites, such as ABCebay, ABCmortgage, and ABCvisa.

  • Don't pair a common word or your name with a different character at the beginning or end, such as $user or johnsmith7.

  • Don't use the same password from one application to another. “It’s fine to have a simple, short password on a news Web site,” says Dr. Tygar. “But use a different, longer, more complicated password on a site with sensitive information.”



From "Scam-Proof Your Life: 377 Smart Ways to Protect You & Your Family," by Sid Kirchheimer, 2006, p.  262.

Sid Kirchheimer writes about consumer and health issues.

Topic Alerts

You can get weekly email alerts on the topics below. Just click “Follow.”

Manage Alerts

Processing

Please wait...

progress bar, please wait

Tell Us WhatYou Think

Please leave your comment below.

Technology
Resources

Social Networking

Step-by-step instructions on how to use some of the Web's most popular networking sites. Go

 

How to Use Your PC

Guides covering everything from setting up your desktop, to getting the most out of Excel. Go

 

Protect Your Digital Life

Keep your computer secure, your web surfing safe, and your inbox spam free with these tips. Go

Discounts & Benefits

Geek Squad Computing

Members save on Geek Squad services with Geek Squad® Tech Support & Guidance for AARP® Members.

AARP Discounts on ADT Companion Services

Members get 20% off NEW installation and activation of ADT® Personal Emergency Response System.

AARP Discounts on Consumer Cellular Phones and Plans

Members save 5% on monthly service and usage charges with Consumer Cellular.

Member Benefits

Members receive exclusive member benefits & affect social change. Join Today

Featured
Groups

computer questions and tips

Computer Questions & Tips

Pick up some handy how-tos from this savvy group of techies. Discuss

 

Freebies Group

Favorite Websites & Freebies

Share your top sites for interesting information, helpful resources — and free stuff! Discuss