Good passwords are hard to come by. If you suddenly and without much warning had to pick a password to access your PC, or your "bookmark "website, or your internet banking facility, what would you do? Most users would make their password their names, their partner's names, their birthday, their partner's birthday, their favourite colour or book or movie or character, or something famwell-known. You can probably already see a pattern forming here, can't you? Ok, now for the scary part: these are all easily guessed and your private information is like a bank who holds all your money.. on the foot path where everyone can see it and grab it!
How do we fix this? We think up a better password. Does that mean something long, awful and cryptic that you wont remember and will probably have to write down in case you forget it? Please no! That's the sort of password that snooping people want! So we need to strike a balance somewhere One that is much more than some simple detail, yet cryptic enough that it couldn't be guessed too easily.
Let's begin with a name, say Geoffrey. Now, say Geoffrey wants something simple, yet based on his name which will act as a “keyword” to help him easily recall his password. We'll mix in some UPPER and lower case characters and some numbers to replace letters, also known as elite speak, or 1337 speak. He might come up with up G30Ffr3y. That's decent. Let's say Geoffrey is a keen internet surfer, he might try and combine his hobby with his password. We'll abbreviate “internet” as simply “net”. Ok, we'll try the substitution technique again to get “n3T”. Excellent! Now to combine them as two words. Now most people separate words with a space “ “, but on the internet, that is best represented as an underscore “_”. So, we'll combine them both using our new tricks to get “G30Ffr3y_n3T”. Excellent!
Geoffrey now has a password that he can use comfortably, simple enough that he shouldn't need to write it down ever and practically uncrackable. I say “practically” because given enough time, any password in the world can be cracked. But this one should keep the password crackers busy and by the time they're even remotely close to it, he's changed it and they will have to begin again.
The next time you hear of someone's account being broken into, or see "users" trying to find a sticky note with their password on it, just remember, with a password created using the above techniques you wont really have to worry as much about either of those problems.