Secure your Mac: strong passwords
It is a sad fact of life that your Mac is only as secure as your password is strong. A good password is complex enough to thwart both idle hands ('I wonder if Scott is as dumb as he looks. I bet his password is 12345. Let me try it and find out') and dastardly hackers out to steal your personal information ('Ah, some fool has left his Mac unattended, let me try some brute force dictionary attacks in hopes that I will gain entrance into his digital domain and clear out his bank account AND delete all his iPhoto pictures'). Sadly, passwords that make security conscious paranoid freaks like myself happy are both difficult to remember and to type (it is all part of their charm). Luckily, Apple has included a small utility that can help you find a password both complex and memorable.Read on to learn how.

The Password Assistant (pictured above) is available when OS X prompts you for a password in Accounts or when you manually create a new Password item in the Keychain. Simply click on the lock and the Password Assistant springs into action offering up some secure passwords for you like so:

You have a few options with Password Assistant:
- The type of password you are going to create. Password Assistant offers:
- Manual - This allows you to manually enter a password of your choice, which is great to see how good (or how bad) your current passwords are.
- Memorable - Creates a password composed of a mix of words and random characters that is both easy to remember and secure.
- Letters & Numbers - Creates a password with no punctuation marks in the mix.
- Numbers Only - Good if you want a password with only numbers in it.
- Random - Completely random password, which will be tough to remember but very tough to crack.
- FIPS-181 compliant - Creates a password that complies with Government standards regarding password creation (you can read about it here).
- Once you decide on what type of password you want, you need to choose the length. Recent versions of OS X support password lengths of 8 to 31 characters (read this KB article for older versions of OS X). I'm hoping that Leopard will bring support for passphrases, but until that happens we'll have to suffer with the system limitations.
Once you have decided on the options, a password is generated for you (unless, of course, you picked 'Manual,' in which case you will have entered your password by hand). Password Assistant also rates the Quality of the password with a simple meter (filling it all the way to the top with green means you have a very good password) which is quite helpful when deciding on which password to use. Be sure to note that if you aren't thrilled with the password that is offered up you can click on the arrow and find a few alternatives, and get even more suggestions should none of those tickle your fancy.There you have it, a quick and relatively painless way to create a secure and memorable password. Because let's face it, if you can't remember your super complex password it won't do you a lick of good.
Share
Categories
It is a sad fact of life that your Mac is only as secure as your password is strong. A good password is complex enough to thwart both idle...
Add a Comment
@pauLee: It's possible to reset the admin password from the OS Install Disk. The method mare mentioned in his last comment is for resetting the OpenFirmware Password, though it may also work for resetting the EFI password or whatever the equivalent is for Intel Macs.
September 23 2007 at 6:27 PM Report abuse Permalink rate up rate down Reply@ pauLee
Here's one way to reset your password, another way involves removing RAM, restarting, zapping PRAM 3 times, and rebooting again.
The awesome Steve Gibson has written an amazing Ultra High Security Password Generator. https://www.grc.com/passwords.htm
He can be heard on the TWIT network doing some really good weekly Security Now Netcasts.
A friend of mine a few years back used a violin fingering pattern to type his laptop password. After years of using it, even *he* didn't know his password, despite using it regularly!
September 20 2007 at 12:09 PM Report abuse Permalink rate up rate down ReplyThroughout the whole article you do not mention the one utility that is the ultimate password program 1passwd? Seems to implement everything you are talking about.... and it remembers it for you,
September 20 2007 at 5:48 AM Report abuse Permalink rate up rate down Reply@mare
"It takes 1 minute to reset a password in Mac OS X."
Can you explain?
It takes 1 minute to reset a password in Mac OS X.
So having a superstrong password is overkill. Setting a superstrong KeyChain password (and not automatically unlocking it when you log in) might be more useful.
Joe, there is a way to pull this up on its own. Go under Applications/Utilities/Keychain Access and at the bottom of the window, click on the +. Then click on the key to the right of the passwords box and there it is.
September 19 2007 at 4:56 PM Report abuse Permalink rate up rate down Reply@11 (Joe):
http://www.codepoetry.net/products/passwordassistant
Simple app to bring up the assistant on its own.
O and password is of the "non-existent" category...
September 19 2007 at 4:27 PM Report abuse Permalink rate up rate down ReplyHot Apps on TUAW
Deals of the Day
more deals- Verizon Leather Sleeve for Tablets for $4 + free shipping
- Wicked Jaw Breaker Noise-Isolating In-Ear Headphones for $6 + free shipping
- Refurb Apple MacBook Air Laptops: 12" 64GB SSD for $699 + free shipping
- JVC Motion Sensing Clock Radio with Dual iPod Docks for $55 + free shipping
- Apple iPhone Headset with Mic for $4 + $2 s&h
- Refurb Apple iPod nano 8GB MP3 Player for $99 + free shipping, 16GB for $119
Software Updates
more updates- EFI Firmware Update brings Lion Internet Recovery to 2010-model Macs
- OS X Lion 10.7.3 released with Safari 5.1.3, Wi-Fi bug fix
- Aperture updated to 3.2.2, addresses Photo Stream issue
- Apple updates Keynote to address Lion issues
- Google Search app gets new look on iPad
- Apple releases Apple TV Software Update 4.4.3



21 Comments