{"id":1893,"date":"2025-05-20T14:18:04","date_gmt":"2025-05-20T20:18:04","guid":{"rendered":"https:\/\/www.washk12.org\/tech\/?page_id=1893"},"modified":"2025-05-20T14:19:07","modified_gmt":"2025-05-20T20:19:07","slug":"secure-passwords","status":"publish","type":"page","link":"https:\/\/www.washk12.org\/tech\/secure-passwords\/","title":{"rendered":"Secure Passwords"},"content":{"rendered":"<h1>Secure Passwords<\/h1>\n<div>\n<h2><span>PASSWORD CREATION GUIDELINES<\/span><\/h2>\n<p>Passwords are challenging these days. \u00a0It is critically important to make a password secure, but sometimes that also makes it hard to remember. \u00a0We used to believe that to make a password more secure you would add more characters or change some letters to numbers and using a combination of uppercase and lowercase letters. \u00a0Interesting enough, doing those things doesn\u2019t make it much more difficult for a computer to guess your password. \u00a0What we knew yesterday about passwords, turns out, isn\u2019t accurate at all. \u00a0In the end, what makes more of a difference than anything is length.<\/p>\n<p>We use a specific term to measure the strength of a password: entropy. \u00a0For you math majors, the entropy is calculated by with the following function:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/password_entropy.png\" alt=\"Password entropy equation.\" width=\"175\" height=\"29\" class=\"alignnone size-full wp-image-1839\" \/><\/p>\n<p>Where E is password entropy, R is the total number of available characters, and L is length.<\/p>\n<p>If your not a math major, the issue is summed up fairly well in this comic from\u00a0<a href=\"https:\/\/xkcd.com\/936\/\" target=\"_blank\" rel=\"noopener\">XKCD<\/a><\/p>\n<p><strong>(Disclaimer: the password entropy function used in this comic is slightly different, but the concept is still the same)<\/strong><\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/password_strength_diagram-300x244.png\" alt=\"Password strength diagram.\" width=\"374\" height=\"304\" class=\"alignnone  wp-image-1840\" srcset=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/password_strength_diagram-300x244.png 300w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/password_strength_diagram.png 740w\" sizes=\"(max-width: 374px) 100vw, 374px\" \/><\/p>\n<p><a href=\"https:\/\/xkcd.com\/936\/\" target=\"_blank\" rel=\"noopener\">https:\/\/xkcd.com\/936\/<\/a><\/p>\n<p><span>The best password you can make is 20-30 characters long made up of totally random characters. \u00a0Unfortunately, those are not always very easy to remember, because of that a better solution for most people is a password that is made up of several random words. \u00a0Long passwords are usually hard to remember, but because your brain only has to remember words instead of letters, numbers, symbols, and other punctuation, these are actually easier to remember, but (because of the length) harder for a computer to guess.<\/span><\/p>\n<p>If<span>\u00a0<\/span><a href=\"https:\/\/www.eff.org\/\" target=\"_blank\" rel=\"noopener\">EFF<span>\u00a0<\/span><\/a>produced a video that explains this concept and gives you a great idea on how to choose these random words.<\/p>\n<p>Video:\u00a0<a href=\"https:\/\/archive.org\/details\/how-to-make-a-super-secure-password\" target=\"_blank\" rel=\"noopener\">How to Make a Super-Secure Password<\/a><\/p>\n<h2><span class=\"uk-h2 uk-h3\">WHAT ARE THE MINIMAL REQUIREMENTS FOR WCSD PASSWORDS?<\/span><\/h2>\n<p>Passwords should have at least 70 bits of entropy to meet password requirements. \u00a0Using this function:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/password_entropy.png\" alt=\"Password entropy equation.\" width=\"175\" height=\"29\" class=\"alignnone size-full wp-image-1839\" \/><\/p>\n<p>Where E is password entropy, R is the total number of available characters, and L is length.<\/p>\n<p>This equates to:<\/p>\n<table>\n<tbody>\n<tr>\n<td>Passwords consisting of all lower case letters<\/td>\n<td>At least 17 characters long<\/td>\n<\/tr>\n<tr>\n<td>Passwords consisting of lower case and upper case letters<\/td>\n<td>At least 13 characters long<\/td>\n<\/tr>\n<tr>\n<td>Passwords consisting of lower case letters and at least one number<\/td>\n<td>At least 14 characters long\u00a0<\/td>\n<\/tr>\n<tr>\n<td>Passwords consisting of lower case, upper case letters and at least one number<\/td>\n<td>At least 12 characters long<\/td>\n<\/tr>\n<tr>\n<td>Passwords consisting of lower case, upper case letters, at least one number, and at least one symbol\u00a0<\/td>\n<td>At least 11 characters long<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-300x300.jpg\" alt=\"Brute force password chart.\" width=\"365\" height=\"365\" class=\"alignnone  wp-image-1838\" srcset=\"https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-300x300.jpg 300w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-1024x1024.jpg 1024w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-150x150.jpg 150w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-768x768.jpg 768w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-1536x1536.jpg 1536w, https:\/\/www.washk12.org\/tech\/wp-content\/uploads\/sites\/26\/2023\/06\/brute_force_password_chart-2048x2048.jpg 2048w\" sizes=\"(max-width: 365px) 100vw, 365px\" \/><\/p>\n<h2><span>PASSWORD STORAGE GUIDELINES<\/span><\/h2>\n<p>Video:\u00a0<a href=\"https:\/\/archive.org\/details\/using-password-managers-to-stay-safe-online\" target=\"_blank\" rel=\"noopener\">Using Password Managers to Stay Safe Online<\/a><\/p>\n<\/div>\n<p><!--more--><br \/>\n<!-- {\"type\":\"layout\",\"children\":[{\"type\":\"section\",\"props\":{\"image_position\":\"center-center\",\"style\":\"default\",\"title_breakpoint\":\"xl\",\"title_position\":\"top-left\",\"title_rotation\":\"left\",\"vertical_align\":\"middle\",\"width\":\"default\"},\"children\":[{\"type\":\"row\",\"children\":[{\"type\":\"column\",\"props\":{\"image_position\":\"center-center\",\"position_sticky_breakpoint\":\"m\"},\"children\":[{\"type\":\"headline\",\"props\":{\"content\":\"Secure Passwords\",\"title_element\":\"h1\"}},{\"type\":\"text\",\"props\":{\"column_breakpoint\":\"m\",\"content\":\"\n\n<h2><span>PASSWORD CREATION GUIDELINES<\\\/span><\\\/h2>\\n\n\n<p>Passwords are challenging these days. \\u00a0It is critically important to make a password secure, but sometimes that also makes it hard to remember. \\u00a0We used to believe that to make a password more secure you would add more characters or change some letters to numbers and using a combination of uppercase and lowercase letters. \\u00a0Interesting enough, doing those things doesn\\u2019t make it much more difficult for a computer to guess your password. \\u00a0What we knew yesterday about passwords, turns out, isn\\u2019t accurate at all. \\u00a0In the end, what makes more of a difference than anything is length.<\\\/p>\\n\n\n<p>We use a specific term to measure the strength of a password: entropy. \\u00a0For you math majors, the entropy is calculated by with the following function:<\\\/p>\\n\n\n<p><img decoding=\\\"async\\\" src=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/password_entropy.png\\\" alt=\\\"Password entropy equation.\\\" width=\\\"175\\\" height=\\\"29\\\" class=\\\"alignnone size-full wp-image-1839\\\" \\\/><\\\/p>\\n\n\n<p>Where E is password entropy, R is the total number of available characters, and L is length.<\\\/p>\\n\n\n<p>If your not a math major, the issue is summed up fairly well in this comic from\\u00a0<a href=\\\"https:\\\/\\\/xkcd.com\\\/936\\\/\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">XKCD<\\\/a><\\\/p>\\n\n\n<p><strong>(Disclaimer: the password entropy function used in this comic is slightly different, but the concept is still the same)<\\\/strong><\\\/p>\\n\n\n<p><img decoding=\\\"async\\\" src=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/password_strength_diagram-300x244.png\\\" alt=\\\"Password strength diagram.\\\" width=\\\"374\\\" height=\\\"304\\\" class=\\\"alignnone  wp-image-1840\\\" srcset=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/password_strength_diagram-300x244.png 300w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/password_strength_diagram.png 740w\\\" sizes=\\\"(max-width: 374px) 100vw, 374px\\\" \\\/><\\\/p>\\n\n\n<p><a href=\\\"https:\\\/\\\/xkcd.com\\\/936\\\/\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">https:\\\/\\\/xkcd.com\\\/936\\\/<\\\/a><\\\/p>\\n\n\n<p><span>The best password you can make is 20-30 characters long made up of totally random characters. \\u00a0Unfortunately, those are not always very easy to remember, because of that a better solution for most people is a password that is made up of several random words. \\u00a0Long passwords are usually hard to remember, but because your brain only has to remember words instead of letters, numbers, symbols, and other punctuation, these are actually easier to remember, but (because of the length) harder for a computer to guess.<\\\/span><\\\/p>\\n\n\n<p>If<span>\\u00a0<\\\/span><a href=\\\"https:\\\/\\\/www.eff.org\\\/\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">EFF<span>\\u00a0<\\\/span><\\\/a>produced a video that explains this concept and gives you a great idea on how to choose these random words.<\\\/p>\\n\n\n<p>Video:\\u00a0<a href=\\\"https:\\\/\\\/archive.org\\\/details\\\/how-to-make-a-super-secure-password\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">How to Make a Super-Secure Password<\\\/a><\\\/p>\\n\n\n<h2><span class=\\\"uk-h2 uk-h3\\\">WHAT ARE THE MINIMAL REQUIREMENTS FOR WCSD PASSWORDS?<\\\/span><\\\/h2>\\n\n\n<p>Passwords should have at least 70 bits of entropy to meet password requirements. \\u00a0Using this function:<\\\/p>\\n\n\n<p><img decoding=\\\"async\\\" src=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/password_entropy.png\\\" alt=\\\"Password entropy equation.\\\" width=\\\"175\\\" height=\\\"29\\\" class=\\\"alignnone size-full wp-image-1839\\\" \\\/><\\\/p>\\n\n\n<p>Where E is password entropy, R is the total number of available characters, and L is length.<\\\/p>\\n\n\n<p>This equates to:<\\\/p>\\n\n\n<table>\\n\n\n<tbody>\\n\n\n<tr>\\n\n\n<td>Passwords consisting of all lower case letters<\\\/td>\\n\n\n<td>At least 17 characters long<\\\/td>\\n<\\\/tr>\\n\n\n<tr>\\n\n\n<td>Passwords consisting of lower case and upper case letters<\\\/td>\\n\n\n<td>At least 13 characters long<\\\/td>\\n<\\\/tr>\\n\n\n<tr>\\n\n\n<td>Passwords consisting of lower case letters and at least one number<\\\/td>\\n\n\n<td>At least 14 characters long\\u00a0<\\\/td>\\n<\\\/tr>\\n\n\n<tr>\\n\n\n<td>Passwords consisting of lower case, upper case letters and at least one number<\\\/td>\\n\n\n<td>At least 12 characters long<\\\/td>\\n<\\\/tr>\\n\n\n<tr>\\n\n\n<td>Passwords consisting of lower case, upper case letters, at least one number, and at least one symbol\\u00a0<\\\/td>\\n\n\n<td>At least 11 characters long<\\\/td>\\n<\\\/tr>\\n<\\\/tbody>\\n<\\\/table>\\n\n\n<p><img decoding=\\\"async\\\" src=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-300x300.jpg\\\" alt=\\\"Brute force password chart.\\\" width=\\\"365\\\" height=\\\"365\\\" class=\\\"alignnone  wp-image-1838\\\" srcset=\\\"https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-300x300.jpg 300w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-1024x1024.jpg 1024w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-150x150.jpg 150w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-768x768.jpg 768w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-1536x1536.jpg 1536w, https:\\\/\\\/www.washk12.org\\\/tech\\\/wp-content\\\/uploads\\\/sites\\\/26\\\/2023\\\/06\\\/brute_force_password_chart-2048x2048.jpg 2048w\\\" sizes=\\\"(max-width: 365px) 100vw, 365px\\\" \\\/><\\\/p>\\n\n\n<h2><span>PASSWORD STORAGE GUIDELINES<\\\/span><\\\/h2>\\n\n\n<p>Video:\\u00a0<a href=\\\"https:\\\/\\\/archive.org\\\/details\\\/using-password-managers-to-stay-safe-online\\\" target=\\\"_blank\\\" rel=\\\"noopener\\\">Using Password Managers to Stay Safe Online<\\\/a><\\\/p>\",\"margin\":\"default\"}}]}]}]}],\"version\":\"4.5.11\",\"yooessentialsVersion\":\"2.2.25\"} --><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Secure Passwords PASSWORD CREATION GUIDELINES Passwords are challenging these days. \u00a0It is critically important to make a password secure, but sometimes that also makes it hard to remember. \u00a0We used to believe that to make a password more secure you would add more characters or change some letters to numbers and using a combination of [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"parent":0,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"footnotes":""},"class_list":["post-1893","page","type-page","status-publish","hentry"],"_links":{"self":[{"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/pages\/1893","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/comments?post=1893"}],"version-history":[{"count":3,"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/pages\/1893\/revisions"}],"predecessor-version":[{"id":1897,"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/pages\/1893\/revisions\/1897"}],"wp:attachment":[{"href":"https:\/\/www.washk12.org\/tech\/wp-json\/wp\/v2\/media?parent=1893"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}