Change Password

[rozeltf]

I just got new account today and went into cPanel to change password but wasn't allowed as "the new password is based on a dictionary word" I've been thumbing through my Websters and have yet to come up with an 8-letter word with 4 numbers in it! Is there another way to get my password changed to what I want?

[Guest Serpentine]

Why not change some letters to numbers? Or better yet, get a password program to create one for you. That way it stores your passwords and you don't have to remember them.

[TCH-Thomas]

I´m not sure, but I dont think so (for security reasons).

[GroovyFish]

Could it be recognizing numbers/symbols being used in place of letters in real words? Like...t0tal or h3ll0 or h@ppy and still call them "dictionary" words?

[TweezerMan]

I have a feeling that the password is something like 'password1234' - a word that just has some numbers stuck on the end of it. A password like that is insecure, as a dictionary-based password cracking program will also try adding numbers to the end of the words in its dictionary.

 

If CPanel identifies the password as insecure, I don't see TCH allowing you to use that password, even if they have a means of setting it outside of CPanel.

[abinidi]

I'm not sure about this, but it seems to me like when I changed my password, there was one generic error (the dictionary words one you are encountering) that you will see even if there is a different problem. It seems like in my case I was trying to use a variant of my domain name in my password or something and it wouldn't allow it. I ended up using a multi-word phrase (with spaces) and it liked that. Makes for a longer password, but that is more secure anyway.

[rozeltf]

Oh well, I guess I'll have to make do .. along with the wonderful Username I got

[abinidi]

Yes, well, I happen to agree that I wish usernames could be changed. But oh well. Good luck choosing a password.

[rozeltf]

I have a feeling that the password is something like 'password1234' - a word that just has some numbers stuck on the end of it. A password like that is insecure, as a dictionary-based password cracking program will also try adding numbers to the end of the words in its dictionary.

<{POST_SNAPBACK}>

 

Not even close ... the 4 letters are together but they do not form a word.

Edited May 5, 2005 by rozeltf

[Guest Serpentine]

The usernames are generated for your security. Making easy usernames and passwords is just asking for trouble. The reason I recommend a program is so you can have passwords like G#.m.aLSfO\$Pf/VB.1z&yP# and not have to bother with remembering and get a password that is not worth the time to try and break.

[abinidi]

The usernames are generated for your security.  Making easy usernames and passwords is just asking for trouble.

<{POST_SNAPBACK}>

 

I don't disagree with you. Just because I would like to choose my own username does not mean that I would automatically choose a bad one.

 

However, with two of my accounts my username is a variation of my domain name. That is worse than if I could choose it myself. For another of my accounts the username is so random I can't ever remember it, so I have it written down someplace.

 

I think a happy medium would be choosing your own username and password, with protections in place to help you not choose bad ones.

 

This isn't a complaint. Only an observation.

[Guest Serpentine]

Paul,

 

I agree, the first two were setup before the change to the new security features. I think they dont let anyone choose is not only for security but also to make sure there can be no duplicates.

[TCH-Bruce]

And let's not forget that this is done with automated scripts.