How Password Cracking Works And What You Can Do to Protect Yourself

If you think your passwords are secure, you may want to think again. Password crackers are getting smarter and faster every day, and what you think is a strong password could be hacked in a matter of minutes. The truth is, your passwords may not be as secure as you think. But don’t panic just yet. There are some effective ways to outsmart these password crackers and better protect your accounts. This guide shows how password cracking software works, the common mistakes people make that put their passwords at risk, and the strategies to create and manage strong, secure passwords.

How Password Cracking Works: The Methods Used by Hackers

Hackers use a few common methods to crack passwords. The easiest is brute force, where they use automated software to guess every possible combination of letters, numbers and symbols until they get in. This works best on short, simple passwords.

For hackers who have your personal information, like birth date, telephone numbers, address, etc., they will use this information to guess your passwords, such as:

• Name combinations (i.e., jamesbrown, jbrown, brownj, brown, etc.)
• Hobbies. (i.e., books, movies, celebrities, athletes, songs, cars, etc.)
• Important year or number (i.e., jamesbrown1, jbrown1, brown1991, etc.)

Another method is dictionary attacks, where hackers use dictionary words to guess common passwords, like “password” or “123456.”

Hackers can also install keylogger software on your PC to record your keystrokes and steal your actual password. This often involves phishing emails, where the hackers trick you into downloading and installing the software.

Another commonly used method is to trick you into visiting a phishing website to get you to submit a login or password reset form. The website can be a fake bank site or social media account lookalike. Once you submit the form, your password will be captured and saved to their database.

How to Protect Yourself Against a Password Cracker

While it may seem like hackers are just too sly and that you can’t avoid their wicked schemes, you can protect yourself:

Use Unique Passwords

To keep your accounts secure, it is necessary to use unique passwords for each account that you have online. It is good to use a password manager if you have difficulty remembering all of your passwords.

Use a Strong and Complex Password

Passwords should be at least 12 characters long. Aim for 14 characters or more for important accounts. In fact, the more characters the better.

Use a mixture of letters, numbers and symbols. The more variety, the better. For example, something like “Tr0ub4dour&3” is better than “password1234.”

Don’t Use Personal Information

Avoid names, dates of birth, addresses or other details that can be found on social media or public records.

Use a mnemonic device or passphrase. A passphrase is a series of words or a short phrase that is easy to remember but hard to guess. For example, “EatMoreTacosEveryDay” or “KeepCalmAndCodeFor99Days.” Just make sure it’s not an actual phrase already in use.

Enable Two-Step Verification

This feature adds another layer of protection to your accounts. In addition to a password, you can make use of two-step verification, such as using an authenticator to generate OTP, an SMS sent to your phone, or an email to your inbox. Since you are the only one who can confirm the notification, hackers cannot access your account – even if they know your password. Follow these steps to set up two-factor authentication on various social networks.

Be Cautious of Phishing Emails and Malicious Sites

Phishing attempts are a common way for hackers to steal passwords and gain access to accounts. Never enter your password on any site, click unsolicited links, or download attachments in any email unless you are 100 percent sure it is legitimate.

Wrapping Up

This quick primer has shown how password crackers operate and the steps you need to take to safeguard your accounts. While no system is 100 percent foolproof, using a unique, complex password for each website or service is the best thing you can do. If you have difficulty remembering your passwords, you may want to consider using the password manager built into Chrome or Microsoft Edge.

Image credit: DepositPhotos