![]() |
A computer account allows access to one or more computers with specific permissions. Accounts are typically used to prevent computer users reading or deleting each others' files. Role accounts are also used for specific adminstration tasks, such as performing backups. The information required to access a computer account usually consists of a server name, an account name and a password. An account may be used to access server(s) via more than one protocol. For example, you may have the same account name and password to modify web pages and check EMail.
A password is a covenient construct that has been used throughout history. It is a unique piece of information that should only be known by a legitimate party and can be easily checked. Passwords have flaws: they can be obtained by evesdropping and by chance. Programs exist to try all words in a dictionary, so steps should be taken to avoid using single words, combinations of words and variations. Don't use personal information, this can be obtained, inferred or guessed. Ideally, you should use random letters, numbers and punctuation, although this may be hard to remember. You may want to create a unique phrase and use the first letter from each word. An example would be "Sun for Madrid is a common occurance", resulting in the password "sfmiaco". This is easier to remember, but remains hard to guess. (Of course, you cannot use this cited example because other people will have added this password to their password cracking dictionaries.)
Whatever passwords you choose, you must make them different for every system you use. It is extremely bad practice to use the same password on different systems, especially untrusted systems. It is easy to infer information about accounts on other systems. A shared password given to an untrusted party is the final piece of information required to obtain access to accounts elsewhere. Change your password if you suspect that it has been compromised. Additionally, you may want to change your password periodically to ensure that access is safe.
Some password systems enforce such policy, although ... Do not use re-use any old passwords, other parties may ...
| Xirium Penthouse Suite 102 Long Gore Farncombe Surrey GU7 3TD England UK |
Telephone: +44 1483 415 485 Mobile: +44 79 7779 1430 EMail: webmaster@xirium.com WWW: http://www.xirium.com/ |