I am having to share a PC with someone who,in some fields,is a Business colleague but in others he is a Competitor. He also happens to be a Computer Genius and I need to move to a higher level of Password Security on some of my more sensitive files. Can anyone guide me in how I can create an 8-OCTET PASSWORD that will give me piece of mind?
migrated from stackoverflow.com Aug 13 '10 at 19:02
This question came from our site for professional and enthusiast programmers.
First, note that if your friend has physical access to the machine, it is probably possible for your friend to install either a software or hardware keylogger to simply read your password, or your source code, directly; other possibilities include modifying your encryption software to save a copy of all files being encrypted into another directory.
This may not be a problem that can be solved.
Second, are you already using some encryption software, and want to know how to generate a good password? Or are you looking for software recommendations?
I'd recommend using GnuPG for encrypting your files:
You can type whatever you want for the passphrase, long or short.
Third, the passphrase itself, I recommend stealing the algorithm used in Openwall Linux's pam_tcb tool: pick two or three random words from
On my system, with a 98000-line words file (16.5 bits of entropy per word) and the symbols easily accessible on my keyboard (36 symbols and numbers, 5.1 bits of entropy each), this would let you generate 59 bits of entropy with three words and two symbols -- just keep going until you're happy with the strength. Such passphrases are usually much easier to remember than strictly randomly generated passwords, but they do have to be significantly longer to provide the same strength.
Why eight octets? (I presume you mean octet in the 8-bits/a byte/an ASCII character sense?)
Irrespective, there are a wide variety of password generators that generate a random mix of alpha (mixed case) and numeric characters out there, so I'd recommend using one of these.