Gmail password security

[robeng]

Hi. I have a pretty long gmail password. In my password i havea part of my gmail username. For example if my gmail is something@gmail.com then my password is somethingwhateverafter. Is it safe to have it like that or should i switch it out to something else?

 

Thanks in advance

[techguru]

Hi. I have a pretty long gmail password. In my password i havea part of my gmail username. For example if my gmail is something@gmail.com then my password is somethingwhateverafter. Is it safe to have it like that or should i switch it out to something else?

 

Thanks in advance

thanks for a clue to your password.....gonna go delete all your email now

[Enderman]

 

youre fine

[LogicalDrm]

I would change it. None of my passwords have part of username. Or my name, email, phone etc. on them. Closest I got is my bank usernumber as pw for few sites.

I also would recommend using password manager like LastPass and 2-way auth.

[Umair]

As long as that is only a small part of your password (less than 30% of characters or so) then you should be fine.

 

If you have an Android or iOS device, you can also setup 2-factor authentication using Google Authenticator for an extra layer of security.

[BrightCandle]

Humans are really good at remembering short sentences and yet they are notoriously difficult for computers to generate and guess especially if a small transformation has been done to make it much more difficult like the addition of a $ or other punctionation. Conversely humans are kind of awful and remembering random letters and numbers, even short term password length is beyond the human mind without some reference to something they know.

 

In todays world you want to be aiming for 12 characters or more, so you can get there with randomised passwords and lastpass and a lot of people do that. The other option is to start to use a sentence that is memorable and specific to each site. Even then lastpass can help remember it but I still think there are just too many passwords to have a unique one on each site and to remember them without effectively having 1 password that you just insert the companies name into. Someone is going to decode it or grab a free text copy of your password, take a guess at how you use it elsewhere and get access to everything you log into. It might be the only reasonable way for a human being to meet the unique password for each site recommendation and at the same time remember them all reliably.

[BURNINGJUNK]

Two step verification all day man, not the login process, set your password to "twostepverification"

[Bensemus]

For my email I use a long unique password as well as two-step as everything else is connected to it and If any of my other accs are "hacked" I will still have my email and can regain access to the acc. So most of my other accs just use the same few passwords or random ones and I just let chrome put them in for me as I don't have anything important on them. Accs related to money are also unique.

 

So i would take out the bit of username make a new one that is a sentence and only use that password on your email.

[beeny]

I use a phrase from a song as it is easy to remember

Two step verification is a good idea as well