[GUIDE] How to Create a Strong/Secure Password

[GreatArkansas]

Someone hacked my common password and stolen my all BTC about 0.5 BTC.
(...)

How come the hacker able to transfer your BTC from your wallet? What kind of Bitcoin wallet do you use?
It's kinda impossible a hacker can hack your Bitcoin wallet for using a password, unless you are using some centralized Bitcoin wallet that you are not the only one who knows your private keys or you don't have any the private keys of your Bitcoin wallet.

Just beware, don't really trust google for holding your passwords. I think what you mean is their built-in password manager in their browser.
Much better to use some password managers that are open-sourced, just like in the first post; KeePass.

[1715332561]

1715332561

[1715332561]

1715332561

[1715332561]

1715332561

[1715332561]

1715332561

[1715332561]

1715332561

[CryptoYar]

Someone hacked my common password and stolen my all BTC about 0.5 BTC. Now I am using google's suggestion for creating a strong password.  I do not save the password on my computer or mobile,  Google saves it and provides me whenever I need. I also use 2FA to keep myself tension free. But all times I feel the pain for my losses for a weak password. After all, your suggestions also helpfull for all like me. Thank you.  

This is the reason why I have told mobile users. Do not use the same password everywhere.
I am sad to hear that your BTC has been stolen

[o_e_l_e_o]

Just beware, don't really trust google for holding your passwords.

+1. Google invade your privacy. They mine your data. They sell your personal info. They track and log everything you do online, every website you visit, every search you perform, every picture you look at, every email you send or receive, every purchase you make, literally everything, and sell it to anybody who's interested. They also have atrocious security practices, have been caught storing users' password in plaintext for years, and have been hacked for user credentials multiple times. I wouldn't trust them with a single piece of my personal information. The fact people are recommending them as a password manager is concerning, to say the least. If you care at all about your privacy or security (and given that you are currently on a bitcoin forum), you should not even have Chrome installed, let alone be using it as a password manager.

KeePass if you want to keep it simple, or a self-hosted Bitwarden server, are what you should be using to create and manage passwords for you.

[hd49728]

DON'Ts:

- Copy & paste your private key to Google search.
- Copy & paste your wallet passphrases to Google search.
- Copy & paste your wallet's seeds to Google search.
- Copy & paste your passwords (for any accounts on any platform) to Google search.
It is applied to all the other search engines, not only Google.

If you unintentionally do it (by mis-click), let's do the following ASAP:
- Move your funds to new wallets, and discard the old wallets.
- Change your wallet passphrases to new ones.
- Move your funds to new wallets, and discards the old ones.
- Change your passwords to new ones (don't reuse any past passwords).

[GreatArkansas]

Anyone here using KeyChain of Apple?
Because I recently used some Apple devices such as MacBook pros and mac ipads.
And I saw their KeyChain which is kinda a password manager on your device, which I think can also import/export or sync with other devices as long as you connect in your apple account.

My question is, is KeyChain of Apple is safe to use for different account's passwords in our apple devices?

[Devawnm367]

Yeah you pretty much covered them all. I always like to make sure that I use Letters, Numbers (Caps and lowercase), and symbols!  I hate how alot of websites require that you only use letters and numbers, Some require only lowercase and numbers! I try to stay away from those websites. To me if they do not know how to make a "Strong Password" The security probably sucks anyway and you should just stay away!

Ex. On how I would create my password!

Phrase: WelcomeToTheJungle
How I would create it:    @W3Lc0M32Th3Jungl3??!

I make my E's (3)
I make my A's @
I make my I's !
I add @,#,$,%,^,&,*,(,)! at both the beginning and ends!

But like I said You pretty much covered all the ways!

[OnaThibault]

The best option is to use some sites like this site -----> https://passwordsgenerator.net/.

Still much safer to use offline password generator, like KeePass.

I never use any password generator, my brain is best generator and paper is for now keep all them safe.

There's still some pros and cons for storing our password online or offline. Yes, it's okay to use paper to keep them safe. Even in storing our private keys in different crypto-currencies wallets, they are suggesting it write in paper and never store it online.

Alternatively, we could use a full bible verse ......

Yes, you can also use this. It could help you to easily memorize the password, as long as you know the bible verse.

Although I want to use strong passwords with lots of special characters, what to do if my memory is not good?

[Subbir]

I think if you would like to use a stronger password than offline passwords  you'll try 2FA Google Authenticator  it'll not be scared of many secure passwords and hacks because if someone wants to log in together with your ID  then the code are going to be logged without the code Also  you'll keep the password safe on the password notepad in order that your memory strength is low. If you are doing not remember your password here  you'll open the notepad pad again.

[o_e_l_e_o]

To me if they do not know how to make a "Strong Password" The security probably sucks anyway and you should just stay away!

Yeah, the same password on some sites will be "Strong", whilst on others will be too weak to even be accepted. Don't rely on websites telling you how strong or otherwise your password is. You have no idea how good or bad their algorithm for calculating that is.

Although I want to use strong passwords with lots of special characters, what to do if my memory is not good?

Use a password manager such as KeePass. I don't know my password to pretty much any online site. My KeePass database knows it, and is synced across all my devices and backed up offline too. The only password I need to remember is the one to decrypt KeePass.

you'll try 2FA Google Authenticator

2FA is good, but don't rely on it. Google Authenticator in particular isn't great - if someone hacks the connected Google account, they can transfer it to another device or disable it altogether without too much hassle. You should use an open source 2FA app instead.

you'll keep the password safe on the password notepad in order that your memory strength is low.

Don't do this. Never write down your passwords in plain text, either on a physical notepad or a software one.

[Negotiation]

The best option is to use some sites like this site -----> https://passwordsgenerator.net/.

Still much safer to use offline password generator, like KeePass.

I never use any password generator, my brain is best generator and paper is for now keep all them safe.

There's still some pros and cons for storing our password online or offline. Yes, it's okay to use paper to keep them safe. Even in storing our private keys in different crypto-currencies wallets, they are suggesting it write in paper and never store it online.

Alternatively, we could use a full bible verse ......

Yes, you can also use this. It could help you to easily memorize the password, as long as you know the bible verse.

Although I want to use strong passwords with lots of special characters, what to do if my memory is not good?

If you do not have a good memory you will not be able to use your password offline through a generator It would be best to have a small diary using pocket diaries that you can take to the green space. If you do not remember the password you need to remember to open the diary.

[libert19]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

[ViceOfBTC21]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

You should write down and store it in a safe place ASAP. Security can backfire and cause you more trouble.

[ViceOfBTC21]

For logging into remote systems like BitcoinTalk, online exchagnes, e-mail and online services, if somebody hacks into their service, you are already fucked. Yes, most of them store passwords in a hashed form, but by then, villains probably have already gained access to your account.

Short passwords with length from 6 to 10 characters are safe enough to use for these. These systems are designed to detect multiple incorrect guesses and to protect the stored passwords properly, but they are not safe to use with encryption systems.

In this case, your methods are good, however, I wouldn't rely solely on one method. I would rather rely on a mix of methods and subsidizing few characters in my passphrase like "this is my passphrase" into "this !s my passp5ra&e" in order to throw off dictionary attacks.

And yes, you can use a password manager like KeePass with a database designated only for storing a password for your wallet. This way you can take advantage from KeePass' key stretching, making it harder for an attacker to steal your Bitcoins. This doesn't mean you can use weaker passphrases - always use passphrases of an entropy of at least 128 bits.

[libert19]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

You should write down and store it in a safe place ASAP. Security can backfire and cause you more trouble.

I have them stored in by brain, and have them remembered for like 3 years or so. Unless I get alzheimers I'm fine lmao

[ViceOfBTC21]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

You should write down and store it in a safe place ASAP. Security can backfire and cause you more trouble.

I have them stored in by brain, and have them remembered for like 3 years or so. Unless I get alzheimers I'm fine lmao

If you use a password manager, you should change a master password and then all other passwords every year.

I would say that the risk of forgetting any password/passphrase is much bigger than having it stolen if you store it in a really safe place.

However, if you forget your password, you still be able to remember at least parts of it, so you can guess the rest of it with Hashcat.

Please, don't use Hashcat for illicit purposes.

[libert19]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

You should write down and store it in a safe place ASAP. Security can backfire and cause you more trouble.

I have them stored in by brain, and have them remembered for like 3 years or so. Unless I get alzheimers I'm fine lmao

If you use a password manager, you should change a master password and then all other passwords every year.

Bruh, might be ok for master password, but huge no for every password I would literally go mad.

[ViceOfBTC21]

I use lastpass (online) and password safe (offline encrypted backups). Do not ever save your master password online/offline, it should only be known to your brain. Yes, Take effort to make one complex password and remember it for the sake of security.

You should write down and store it in a safe place ASAP. Security can backfire and cause you more trouble.

I have them stored in by brain, and have them remembered for like 3 years or so. Unless I get alzheimers I'm fine lmao

If you use a password manager, you should change a master password and then all other passwords every year.

Bruh, might be ok for master password, but huge no for every password I would literally go mad.

Then change the password for sensitive accoutns and files at the very least.

[samputin]

<...>

Alternatively, we could use a full bible verse ......

Yes, you can also use this. It could help you to easily memorize the password, as long as you know the bible verse.

And if that Bible verse is the your favorite one or the one that you always tell yourself to have some motivation, then there's no struggle in remembering that as a password.

I personally do this one. Before, I'm struggling to think of a password. That's why I just tend to use an important date like birthday of my loved ones. But I figured I should use a stronger one. And a Bible verse is a great idea. But I don't use the whole verse. Just the book, chapter and verse number so I can type it easily. Works just fine with me. Plus, I get to recall the message of the verses which helps me spiritually.

[o_e_l_e_o]

Before, I'm struggling to think of a password. That's why I just tend to use an important date like birthday of my loved ones. But I figured I should use a stronger one. And a Bible verse is a great idea.

Neither an important date (or any date for that matter) nor a bible verse (or a passage/phrase/saying/sentence/line/quote from any book/song/poem/movie/tv show/etc.) is a particularly strong password, especially now that you have just revealed that this is how you choose your passwords.

The fact that you are struggling to think of a good password (as would almost everybody) is a pretty clear indication that humans are bad at thinking up truly strong and random passwords. You should use an open source password manager such as KeePass, which will not only securely store all your passwords, but will generate long, random, secure passwords whenever you need a new one.

[noormcs5]

Another thing which i think is worth considering is not only to make a complex password but also to keep it secure. What i have judged that many people create a long complex password but since they cant memorize it, they put it on piece of paper or even as a sticky note on their laptop etc. This is even bigger mistake and there is no use to create a complex password if you can keep it safe from others.