SANS Assessment of Student Learning Plan (ASLP) Security Awareness Training

Which of the following is the best way to create a strong password?

1. Use a combination of letters and numbers only

2. Use a long and unique passphrase

3. Use your birthdate and name

4. Use a simple word with special characters

The correct answer is: Use a long and unique passphrase

Using a long and unique passphrase is the best way to create a strong password because it enhances security through its length and complexity. A passphrase is typically made up of multiple words or a sentence, which makes it easier to remember while still being difficult to crack. The longer the password, the more resistant it becomes to brute-force attacks, where an attacker systematically tries various password combinations. Unique passphrases can include random words or a meaningful phrase that is challenging for others to guess, thus increasing the level of security. Additionally, since many password attacks rely on common words or easily guessed information, using an entirely unique passphrase helps protect against such vulnerabilities. In contrast, combinations that use only letters and numbers may fall short in complexity, while simple words with special characters offer minimal improvement and could still be easily guessed. Using identifiable information such as your birthdate and name significantly increases the risk of being compromised, as this information is often accessible or guessable by attackers. Thus, opting for a long and unique passphrase is a highly effective strategy in password creation.