Questions About Passwords

[TCH-Thomas]

Today I submitted a tech ticket about problems with changing password for cpanel. This was the reply:

Hello,

 

I have changed the password to (edited out) from the cpanel. It was working fine. Please use a combination of alphabets, numbers and symbols. You wont be able to use a dictionary based word, or a combination of numbers.

 

Two questions

1) How come I until now have been able to use a dictionary based word?

2) How come that a tech person once gave me a dictionary based word with a combination of numbers to use as password for my WHM and one of the cpanels (example1462 for instance)?

[TCH-Andy]

Hi,

 

1. The old versions of cpnel did not check for insecure passwords - but certainly all the recent versions have had a check in to make sure it is not a dictionary word.

 

2. When in WHM, it does not have the same checks. Hence, you can set a dictionary password from within WHM (or as the root user). Hence the tech person would be able to set that. If you change passwords for your accounts in WHM, you can also bypass the dictionary word checks.

[TCH-Thomas]

Thanks Andy

 

If you change passwords for your accounts in WHM, you can also bypass the dictionary word checks

But then I would have a angry HG after me.

[TCH-Thomas]

I forgot one question...

Does cpanel check for english dictionaries only? I mean would it help if I tried a swedish word?

[TCH-Andy]

 

To be honest I have no idea - but you could probably use a swedish word.

 

Why would you want to reduce the security on your site, and increase the possibility of it being hacked though !!!!

[TCH-Thomas]

No, I dont want that, just figured there should be something easier to remeber than a bunch of mixed no sense letters. Like if I can come up with a word and add a "&" then some numbers and ending with "$" for instance.

 

Theoretically a password generator must come up with a word sometimes too.