![]() |
Strong passwords
Passwords, of course, are nothing more than simple character strings that a user must remember and enter to gain access to network resources. Most networks have no severe restrictions on passwords, other than the default for the operating system used by the network administrator.
But some network administrators enforce strong passwords on their network, and these passwords normally have more requirements than standard passwords. For example, some of the basic strong password requirements in Windows 2000 include:
Often, strong password policies prevent passwords from being reused for a specified amount of time. For more information about strong passwords, see the article -Should you enforce strict password requirements in Windows?"
Generating strong passwords
As a support tech who's responsible for changing passwords when users forget them, you need a quick way of generating passwords when requested. It's easy to do with standard passwords--just make up a new word and tell the user. Strong passwords are trickier. You need to make sure you follow all of the rules and make sure you create a unique one each time a user forgets the password.
That's where the Random Password Generator comes in handy. With this utility, you can rapidly create thousands of passwords that meet your network administrator's strong password policy.
The Random Password Generator is a freeware utility, so you don't need to worry about justifying it before trying it out. You can obtain it directly from the programmer's Web site.
Don't blink when you go to download the file or you'll miss it. The download file, Rpgen.zip, is small--only 21 KB--so it will download very quickly. Extract the file to a temporary directory, and you'll find three equally small files:
Random Password Generator is a snap to use. Just double-click the Pw_generate.exe file to start it. When you do, you'll see the program begin (see Figure A).
| Figure A |
![]() |
| You don't need to install Random Password Generator, just run the executable. |
Enter all of the parameters for the passwords you want to generate. You can select the characters you want to use in the passwords by selecting the appropriate checkboxes. In the Length field, specify the minimum length of the passwords you want. Enter the number of passwords you want in the Password To Create field. When you're ready to go, click Generate. Your new passwords will appear at the bottom of the screen as shown in Figure B.
| Figure B |
![]() |
| The generated passwords appear at the bottom. |
You can save the passwords to a text file by clicking Save. Doing so will cause Random Password Generator to create a file called Pw_generate_file.txt. You can then view this with any text editor.
RPG caveats
You'll probably quickly notice at the bottom of the screen that Random Password Generator can create passwords that include characters that don't appear on your keyboard. You don't want to save or use passwords that include such characters. These characters, although valid, appear as ASCII codes when you press and hold down the [Alt] key and enter a number on your computer's keyboard. Naturally, you don't want to put your users through such contortions.
When you set a new password for a user, e-mail him or her the random one you generated and make sure you set the option for your network operating system that forces the user to immediately change the password. You don't want the user to always use a password such as xbv)]kmKCxsmoP!. Having such long and complex passwords only encourages users to write it down on a sticky pad and affix it to their monitor. Let the user create his or her own password that can be remembered and still fits the rules.
TechRepublic is the online community and information resource for all IT professionals, from support staff to executives. We offer in-depth technical articles written for IT professionals by IT professionals. In addition to articles on everything from Windows to e-mail to firewalls, we offer IT industry analysis, downloads, management tips, discussion forums, and e-newsletters.
©2003 TechRepublic, Inc.






7%
2%







Linux users can use pwgen as an alternative. Quite handy, especially when combined with cracklib.