Protect your sites with real Passwords

Learn about Security for code and servers. Learn how to secure your site and your code. Learn about hacking prevention, finding and identifying exploits, and recognising vulnerabilities. Plus, Weekly Security tips and Tutorials.
Forum rules
Post questions related to security, analyse and learn about vulnerabilities and exploits within code to protect yourself against hackers.

Re: Protect your sites with real Passwords

Postby Killieon » 09 Feb 2009, 06:26

or use this site http://www.cs278.org/tools/phpbb/hash.php

For example
Password:HelloWorld

Click Hash button

phpbb_hash(): $H$9xxx/lj5HYeu4zYiN6XEX1bAN2/xPk/

md5(): 68e109f0f40ca72a15e05cc22786f8e6
Image
User avatar
Killieon    
Ensign
Ensign
 
Posts: 90
Joined: 09 Jan 2009, 16:04
Favorite Team: None
Gender: Male
phpBB Knowledge: 1




phpBB Academy at StarTrekGuide
Support STG
Using PayPal Donate

Re: Protect your sites with real Passwords

Postby Jaymie1989 » 09 Feb 2009, 13:41

I will be changing mine soon, I want strong ones like shown in the first post, But how are we suppose to remember something like l43fasdr354FDDc22 ? :scratch:
I aint got the best memory.
Jaymie1989    
Supporter
Supporter
 
Posts: 1370
Joined: 30 Sep 2007, 15:51
Location: Some where in phpbb_users table
Favorite Team: Liverpool FC
Gender: Male
phpBB Knowledge: 5

Re: Protect your sites with real Passwords

Postby Shock » 09 Feb 2009, 14:00

I just switched all my firefox saved passwords to a min of 20 characters with mixed casing/numericals/symbols.
Took me maybe an hour to change them all and get them all into Keepass and delete them from Firefox's saved passwords.

Surprisingly this password manager is alot easier to navigate and use than others that I've tried to use previously.
(Roboform, etc.)

Now it's just getting use to having to go there to tell keepass to insert login info instead of having it there automatically.

Jaymie, from what I've gathered strong passwords aren't suppose to be something that you can remember.
Keepass stores your login info for you and you create a master password or in my case a keyfile that gets stored on a flashdrive.
From within keepass you can tell it to insert your login info for you and log you into your email or whatever.
Shock    
Supporter
Supporter
 
Posts: 39
Joined: 14 Feb 2008, 00:17
Location: Seattle
Favorite Team: Seahawks
Gender: Male

Re: Protect your sites with real Passwords

Postby Erik Frèrejean » 09 Feb 2009, 14:29

Jaymie1989 wrote:I will be changing mine soon, I want strong ones like shown in the first post, But how are we suppose to remember something like l43fasdr354FDDc22 ? :scratch:
I aint got the best memory.

Use a tool like 1password if you are a mac user. Or KeePass (no experience with that one). You have to think about it in this way. If you can remember it it is most likely a easy to break password. All my passwords are generated by 1password, and are at least 25 characters long with numbers/characters/special tokens which don't repeat. Indeed, I can't remember them but I don't mind cause my mac will (when unlocked with the master pass ;))
Image Proud member of the phpBB support team
Image STG Support team member | Image STG Moderator team member
Image
User avatar
Erik Frèrejean    
phpBB Team Member
phpBB Team Member
 
Posts: 1114
Joined: 03 Dec 2007, 00:49
Location: USERS_TABLE
Favorite Team: New Orleans Saints
Gender: Male
phpBB Knowledge: 10

Re: Protect your sites with real Passwords

Postby Killieon » 09 Feb 2009, 16:16

Jaymie1989 wrote:I will be changing mine soon, I want strong ones like shown in the first post, But how are we suppose to remember something like l43fasdr354FDDc22 ? :scratch:
I aint got the best memory.


same here u r not only one ant good memory to remember a long password like this l43fasdr354FDDc22

but i can do is put long password on FF password stored

there have a backup for FF add on by download for FF memory password and bookmark keeper

the name of SyncPlaces check it out
if u use FireFox https://addons.mozilla.org/en-US/firefox/addon/8426

Image
Image
User avatar
Killieon    
Ensign
Ensign
 
Posts: 90
Joined: 09 Jan 2009, 16:04
Favorite Team: None
Gender: Male
phpBB Knowledge: 1

Re: Protect your sites with real Passwords

Postby Highway of Life » 09 Feb 2009, 16:37

There are a few 25 char insane passwords that I do remember, but it took typing them in about 50 times to remember them. :P
Watch out! I might do a code wheelie!

User avatar
Highway of Life    
STG Jedi Master
STG Jedi Master
 
Posts: 10458
Joined: 08 May 2006, 05:23
Location: Beware of Programmers carrying screwdrivers
Gender: Male
phpBB Knowledge: 10

Re: Protect your sites with real Passwords

Postby Jaymie1989 » 09 Feb 2009, 21:28

Well I have got my random password with all characters and changed it on my forums that are run on phpBB software.

I hope I can remember them so i wont keep losing it.

I have sent it to my self on an email subject is Frown, and just pasted my password in there with nothing else so if that gets hacked then they wont have a clue what it is.
Jaymie1989    
Supporter
Supporter
 
Posts: 1370
Joined: 30 Sep 2007, 15:51
Location: Some where in phpbb_users table
Favorite Team: Liverpool FC
Gender: Male
phpBB Knowledge: 5

Re: Protect your sites with real Passwords

Postby topdown » 09 Feb 2009, 22:41

Jaymie1989 wrote:
I hope I can remember them so i wont keep losing it.


That is the main point behind these programs. > KeePass
They store the passwords in a database (preferably the app is on a USB stick drive for optimum security), each assigned to a URL or some sort of identifier, in which if your cookies are cleared, you open the drive, put in your database password, then go to the identifier and right click and copy the password to your clipboard for pasting in the login.

No remembering involved.

As for the FireFox plugin posted above, I wouldn't use it for important passwords (Admin, Cpanel, Server Access, etc...),
I have no idea how secure they are once saved in that plugin.
I love FireFox, but remember that Windows platforms are insecure as it is with all of its open ports.
If this is not used on a secure network, and masked internet connection it could be a bad deal.

That's the reason for using portable programs like KeePass so you can unplug it when done retrieving your passwords. ;)
Do not PM me for Support unless I give permission in a post......PM's only help one, posts help everyone !
User avatar
topdown    
STG Styles Leader
STG Styles Leader
 
Posts: 3026
Joined: 01 Oct 2007, 22:56
Location: Handyman's harddrive
Favorite Team: STG Teams
Gender: Male
phpBB Knowledge: 9

Re: Protect your sites with real Passwords

Postby Highway of Life » 09 Feb 2009, 23:14

Jaymie1989 wrote:I hope I can remember them so i wont keep losing it.
You better hope that you don?t remember it. Chances are that if you can remember your password, it is much too simple and short of a password.
Watch out! I might do a code wheelie!

User avatar
Highway of Life    
STG Jedi Master
STG Jedi Master
 
Posts: 10458
Joined: 08 May 2006, 05:23
Location: Beware of Programmers carrying screwdrivers
Gender: Male
phpBB Knowledge: 10

Re: Protect your sites with real Passwords

Postby Erik Frèrejean » 10 Feb 2009, 00:30

Jaymie1989 wrote:Well I have got my random password with all characters and changed it on my forums that are run on phpBB software.

I hope you use a different password for every site? And it it not only for phpBB boards, but for every account you can possibly get on the internet.
And please forget the passwords ;). Your computer is made to remember that kind of stuff.
Image Proud member of the phpBB support team
Image STG Support team member | Image STG Moderator team member
Image
User avatar
Erik Frèrejean    
phpBB Team Member
phpBB Team Member
 
Posts: 1114
Joined: 03 Dec 2007, 00:49
Location: USERS_TABLE
Favorite Team: New Orleans Saints
Gender: Male
phpBB Knowledge: 10

PreviousNext

Return to Security Class

Who is online

Users browsing this forum: No registered users and 2 guests