Shulou(Shulou.com)06/01 Report--

It doesn't seem to be peaceful recently. It was last month that the video website AcFun was hacked. In fact, there are all kinds of information leaks every year, such as this report.

Http://www.aqniu.com/industry/30413.html

The cyber security memorabilia mentioned in 2017. The server is hacked by data, as netizens, we can not avoid it. What we can do is to minimize the personal losses in these information leakage events and improve the level of personal information security. The key is password security.

Here we will explain the password security policy from four aspects.

First, set a strong password.

What is a strong password? First, it is long enough to use the longest password allowed by the website when registering an account or changing a password on each major website. For example, now (July 2018) the maximum password length allowed by QQ is 16 digits, then we will set a 16-bit password; second, it is complex enough. Complex, is to meet the site's password design requirements, and as difficult as possible to guess. For example, QQ requires password design to include at least two combinations of letters, numbers and characters. Personally designed passwords have a lot in common. It is really difficult to guess, so it is recommended to use a password generator. Password generator oivio does not recommend using all kinds of unknown online generators. Here we recommend a password generator awesome-password-generator, which is hosted on Google Code. Google Code was officially closed on August 24, 2015. however, previously created projects can still be downloaded, awesome-password-generator download address

Https://code.google.com/archive/p/awesome-password-generator/

Considering that many friends lack certain postures, here is the link to the Baidu network disk of the last version of awesome-password-generator:

Https://pan.baidu.com/s/1xqaGhKXOMZ-QX9ZCgWw4jQ password: kq8f

Apg1.4.0-portable SHA-1:A0E7E01E0E2A46F7936283C6F730DB966521EAFB

Agp1.4.0-setup SHA-1:87CD9A094D7FDBECF7877A83EC86A0018DA4B3BB

The program, known as "the best password generator in the known universe" (The best password generator in known Universe!), is indeed the best and most reliable oivio user experience. It comes with a green installation-free version of apg1.4.0-portable, which can be run on a flash drive. Oivio always feels that passwords like n7LCL9hd74aUY6eQ or HrATG*m {V%9A7e6# have endless beauty.

Second, one station at a time.

I believe many people know the importance of one station and one secret. But all kinds of crashing into the library are not uncommon, why do most people use only a few or even one set of passwords when using passwords? The reason is simple, because it is easy to remember. Indeed, if you rely on the human brain to remember more than a dozen different passwords like mXhNYrGez35ydUbK, it is uneconomical and confusing. Some people make a fuss about this, such as "14 years later, password experts admit that they are wrong: complex passwords do not improve security."

Http://tech.qq.com/a/20170810/025284.htm

At first glance, I think that complex passwords are not safe, but if we take a closer look, we can see that some people are lazy and change only one or more characters or even write them down in notepad on the computer screen when they change their passwords regularly. This is undoubtedly very dangerous.

Oivio said so much earlier, are you here to recommend password management tools like KeePass, LastPass, and 1Password? Of course not! What oivio introduces to you here may be a better and more economical approach than these password management tools. Yes, all passwords are randomly generated by a password generator, and the passwords are recorded in notepad, but the notepad is encrypted with encryption software and backed up in the cloud. Oivio's encryption software uses TrueCrypt (7.1a). As the development of the software has been stopped, the official website has also been transferred, but you can download the historical version of TrueCrypt and various language packs and addresses on Github.

Https://github.com/DrWhax/truecrypt-archive

Here oivio also provides you with the Baidu network disk link of the last stable version 7.1a of TrueCrypt and its Chinese language pack: https://pan.baidu.com/s/1CvSgFkuD1TfVOX00ueDRVQ password: 7mia

You can also use his successor VeraCrypt, the official website.

Https://www.veracrypt.fr/en/Home.html

Both of them have the same usage, so you can Google the TrueCrypt usage by yourself. TrueCrypt supports the use of key file encryption, oivio habit of entering a sentence into notepad as a key file (notepad file as long as the same encoding, the same input, the same format, its Hash value is also the same), do not have to remember any password, if (try not to ah) even use Winrar encryption to save. When oivio registers an account, it casually adds the user name, account number, password, verification mailbox, registration time, website URL and other information to the notepad that records the account password. In the future, when logging in to the account, except for the passwords of very few websites (such as Baidu PC client), most of the passwords are copied and pasted, and oivio does not feel the essential difference between the 8-character password and the 16-character password.

Third, change your password regularly.

It is safe to change your password regularly. Following the steps above, changing your password is nothing more than replacing another string of characters in your notepad.

Fourth, other matters.

Note that you must make a good backup, both in the cloud and mobile. The practice of oivio is to bring a flash drive in the key chain, in which there is notepad encrypted with TrueCrypt, and the installation package of TrueCrypt. No matter where you go, you can open it at any time or download it from the cloud. You should really remember the sharing link of Baidu network disk, such as remember.

Https://pan.baidu.com/s/13ItUughFKqcAwO5rVvve7w

It's not that hard. In addition, when designing passwords, we should consider that there are a small number of websites that do not support password copying and pasting. When designing accounts and passwords for such websites, we should try our best to avoid less recognizable characters such as "0Oo/Il", such as Baidu Network disk PC client. Every time we enter a 14-digit random password, it feels terrible. After all, oivio rarely enters the password manually.

That's basically it. Oivio looked at various password security policies and felt that a lot of people were talking nonsense. When it comes to one secret at one station, they like to say what signature. For example, the QQ password is the QQ+ signature, and the Wechat password is the WX+ signature. There is no doubt that once the QQ password is cracked, it is basically tantamount to cracking the Wechat password at the same time, deceiving themselves and others, and it is not a strict sense of one password at all. Or in the end, they all come around and recommend password management tools. Oivio doesn't say that these password management tools are not secure (who knows, in case the password management tool server is hacked), but it is true that password management tools are convenient. Anyway, oivio is not afraid of trouble and has never used password management tools.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.