Password

A password, sometimes called a passcode, is secret information used to confirm a user's identity. It helps make sure only the right person can access important information or services on computers and the internet. People usually remember their passwords, but with many services to use, it can be hard to remember a different password for each one.

In general, a password is made up of a sequence of characters including letters, digits, or other symbols. If the characters are only numbers, the secret is sometimes called a personal identification number, or PIN for short.

A password does not need to be a real word from a dictionary. Using something that is not a real word can make it harder for someone else to guess, which helps keep your information safer. Sometimes, people use a passphrase, which is a memorized secret made of a sequence of words or other text separated by spaces. A passphrase is similar to a password but is usually longer, which can add extra security.

History

Passwords have been used for a very long time. In the past, guards would ask people to say a secret word before letting them into a place. This idea helped make sure only the right people could enter.

During big wars, like the Battle of Normandy, soldiers used special words to recognize each other. For example, one group might say "flash" and the other would answer "thunder." These words were changed often to keep them safe.

Computers started using passwords a long time ago too. In 1961, a computer system called the Compatible Time-Sharing System was the first to ask for a password. Today, we use passwords to log into many things, like computer systems, mobile phones, and even to read news online.

Choosing a secure and memorable password

It’s important to pick a password that is easy for you to remember but hard for others to guess. If a password is too easy, someone might guess it. But if it’s too hard to remember, you might write it down or keep changing it, which can also make things less safe.

One good way to make a strong password is to combine two or more words that are not related and change some letters to numbers or symbols. Avoid using just one common word, like the ones often found in lists of easy passwords. These easy passwords include names of pets, birthdays, or the word “password,” and they can be guessed by others.

Alternatives to memorization

It can be hard to remember many passwords because people use so many different services online. Some people use the same password for many accounts, but this can be risky if that password is discovered. Safer ways to help manage passwords include using special tools called password managers or systems that let you sign in with just one password for many services, known as single sign-on. Keeping written lists of less important passwords can also help. These methods can make it easier to remember just a few important passwords.

Factors in the security of a password system

See also: Password strength and Computer security

The safety of a system that uses passwords depends on several things. The system needs to be built safely to stop problems like computer viruses. It’s important to keep passwords private.

Today, many computers hide passwords when you type them to keep them secret. But some people think this might make users choose weaker passwords by accident. So, it’s good if users can choose to see their passwords while typing.

There are many ways to make passwords more secure. One way is to allow only a few tries before the account is locked. Another way is to store passwords safely, using special methods. Some systems don’t store the password but keep a special code made from the password.

When passwords are sent over the internet, it’s important to use safe methods to protect them. Some systems prove you know the password without sending it.

Changing passwords is sometimes needed if someone thinks their password might have been discovered. Some systems let users reset their passwords by answering questions, but these questions should be hard to guess.

Having each user with their own password is better than sharing one password.

To make passwords stronger, some systems ask for longer passwords or mix different kinds of letters and numbers.

Sometimes people reuse the same password on many sites, which can be risky. Using a password manager or writing passwords down in a safe place can help keep them secure.

After someone passes away, it’s important to have a safe way to share their passwords with the people who need them.

Using more than one way to check who you are, like a password and a code, makes it harder for someone to pretend to be you.

Password rules

Many groups have rules about how to make a good password. These rules tell us how long a password should be and what kinds of letters, numbers, or symbols to use. Some of these rules came from a report in 2003 by the National Institute of Standards and Technology.

In 2017, experts said these rules might not always keep information safe. They suggested using longer, easier-to-remember phrases instead of very complex passwords. This helps people remember their passwords without making them easy for others to guess.

Password cracking

Sometimes people try to guess passwords by testing many options. This is called a brute-force attack. Another way is a dictionary attack, where common words and lists of usual passwords are tried.

The strength of a password depends on how hard it is to guess. Weak passwords are easy to find, while strong ones are hard to discover. Some programs can help find weak passwords. People have started choosing longer and better passwords.

Alternatives to passwords for authentication

People have tried many ways to make logging in safer than just using passwords, because passwords can sometimes be guessed or stolen. Some of these methods work only in special cases or are hard for everyone to use.

One idea is to use passwords that work only once. This can stop some types of attacks, but it can be inconvenient. Some banks use a special code that changes each time you use it. Another method shows a changing code on a small device you carry.

Some systems let you log in without a password by using a special device, like a phone or a key, to prove who you are.

All these methods try to make it easier and safer to keep your information private online.

Obsolescence

Some people think passwords aren’t the best way to keep things safe online. They believe we should use other ways, like biometrics, two-factor authentication, or single sign-on. But studies show these new methods can be harder to set up and use for everyone. That’s why we still use passwords today. The real problem is how people pick and remember their passwords, especially with so many devices and networks.