CeeCee Posted December 6, 2007 Share Posted December 6, 2007 http://www.microsoft.com/protect/yourself/...rd/checker.mspx https://amethyst2.cit.cornell.edu/cuwl-cgi/...passCheck1.cgi/ This one is for paranoids, since it's a TLS protected page. Path Copy TeraCopy Unlocker Link to comment Share on other sites More sharing options...
LUSHER Posted December 7, 2007 Share Posted December 7, 2007 http://www.microsoft.com/protect/yourself/...rd/checker.mspx https://amethyst2.cit.cornell.edu/cuwl-cgi/...passCheck1.cgi/ This one is for paranoids, since it's a TLS protected page. Paranoid or not, it's silly to enter your real passwords into such "checkers" whether TLS or not. Link to comment Share on other sites More sharing options...
CeeCee Posted December 7, 2007 Author Share Posted December 7, 2007 Paranoid or not, it's silly to enter your real passwords into such "checkers" whether TLS or not. You can change a letter or two from the real password. I did so. I don't think that makes any difference. For example, if your real PW is pass1234, you can type pess1235. You get the basic idea, what ever your PW is strong or weak. Also, this is what they say on the Microsoft checker: Password Checker does not collect, store, or transmit information beyond the computer that you use to access Password Checker. The image works on your computer desktop until you navigate away from the page. The security of the passwords entered into Password Checker is similar to the security of the password you enter when you log into Windows. The password is checked and validated on your computer, but is not sent over the Internet. Path Copy TeraCopy Unlocker Link to comment Share on other sites More sharing options...
Moderators Andavari Posted December 7, 2007 Moderators Share Posted December 7, 2007 Looks like I need to change my forum login password as MS deems it to be weak, but I think I already knew that. At least my email password is medium, but I suppose it needs some thoughtful improvement too. Link to comment Share on other sites More sharing options...
CeeCee Posted December 7, 2007 Author Share Posted December 7, 2007 It's good to change (some of) your passwords sometimes, even though you are sure, that your password is not in the wrong hands. I change my online banking password maybe 2 times a year. Or atleast once a year. When and if you change, make sure that it's no weaker than previous one. Path Copy TeraCopy Unlocker Link to comment Share on other sites More sharing options...
LUSHER Posted December 8, 2007 Share Posted December 8, 2007 You can change a letter or two from the real password. I did so. I don't think that makes any difference. For example, if your real PW is pass1234, you can type pess1235. You get the basic idea, what ever your PW is strong or weak. Also, this is what they say on the Microsoft checker: Password Checker does not collect, store, or transmit information beyond the computer that you use to access Password Checker. The image works on your computer desktop until you navigate away from the page. The security of the passwords entered into Password Checker is similar to the security of the password you enter when you log into Windows. The password is checked and validated on your computer, but is not sent over the Internet. Sounds like BS to me. If the password is checked and validated on your computer, why the need for TLS? Also even if everything is local (e.g javascript) , you can imagine scenarios with XSS attacks etc. Granted all this is very unlikely, but that's not my point away. The reason why i said i did "paranoid or not....", has nothing to do with whether it can be exploited or not. Rather I was trying to imply that doing so doesn't give you any meaningful information really. You already know how strong or weak (roughly) your password is, or really you are wasting your time here... Link to comment Share on other sites More sharing options...
Pfipps Posted December 14, 2007 Share Posted December 14, 2007 I just use keepass because it has a password strength tester. I think those password managers are great pieces of free software. You also have Password Safe. Link to comment Share on other sites More sharing options...
Humpty Posted December 15, 2007 Share Posted December 15, 2007 System Information for Windows (SIW) easily shows all my login names and passwords for every forum and OE's email accounts. Does it show your passwords, even with your password security apps installed? SIW Link to comment Share on other sites More sharing options...
davey Posted December 17, 2007 Share Posted December 17, 2007 Hey Humpty, Thanks for the link. davey Link to comment Share on other sites More sharing options...
JDPower Posted December 18, 2007 Share Posted December 18, 2007 System Information for Windows (SIW) easily shows all my login names and passwords for every forum Really? All it shows on mine is my router login password Link to comment Share on other sites More sharing options...
Humpty Posted December 18, 2007 Share Posted December 18, 2007 Really? All it shows on mine is my router login password Naturally if I delete all FF's cookies my forum login details don't show. Protected storage is running but my OE usernames/passwords still show but my router login doesn't. Link to comment Share on other sites More sharing options...
JDPower Posted December 18, 2007 Share Posted December 18, 2007 Naturally if I delete all FF's cookies my forum login details don't show. Protected storage is running but my OE usernames/passwords still show but my router login doesn't. Nope, doesn't show anything from my Firefox cookies. I have the protected storage service disabled though, maybe that is the reason. Link to comment Share on other sites More sharing options...
CeeCee Posted December 29, 2007 Author Share Posted December 29, 2007 Perfect Passwords - GRC's Ultra High Security Password Generator: https://www.grc.com/passwords.htm Path Copy TeraCopy Unlocker Link to comment Share on other sites More sharing options...
Matt_ Posted December 31, 2007 Share Posted December 31, 2007 I use the same password for an almost innumerable number of websites, and don't really care that its strength is seriously lacking. I was victim six months or so of a 100$ fraud on Paypal, but I was quickly reimbursed after I contacted the technical support authorities of the latter corporation. I only changed it thereafter because I was prompted to do so by the login system. By the way, any reason why my signature was hijacked by Piriform ? http://www.last.fm/user/Matt714 Link to comment Share on other sites More sharing options...
hotdoge3 Posted January 22, 2008 Share Posted January 22, 2008 I try for a long time said all my Password not good so I try Catdog1E it said very good? so how is that? Link to comment Share on other sites More sharing options...
hotdoge3 Posted February 11, 2008 Share Posted February 11, 2008 I use the same password for an almost innumerable number of websites, and don't really care that its strength is seriously lacking. I was victim six months or so of a 100$ fraud on Paypal, but I was quickly reimbursed after I contacted the technical support authorities of the latter corporation. I only changed it thereafter because I was prompted to do so by the login system. By the way, any reason why my signature was hijacked by Piriform ? did it look like this Link to comment Share on other sites More sharing options...
Recommended Posts
Create an account or sign in to comment
You need to be a member in order to leave a comment
Create an account
Sign up for a new account in our community. It's easy!
Register a new accountSign in
Already have an account? Sign in here.
Sign In Now