Computers are cold, unforgiving machines, especially when it comes to usernames and passwords. Nothing is more annoying then trying to sign in with a bad password. Say you have it written down and you type it in exactly as it is written, but no dice! The precision of a computer is often the issue when a website or system does not let you log in. For humans like you and me, it’s quite easy to confuse letters with numbers, or caps with no caps.
The font Georgia is particularly bad with o's & 0's
Having your passwords written down somewhere is not the best idea, but if you must do it make sure what you have is written correctly. Zeros and the letter O look quite alike when written by hand, as do ones and the letter l. Below is a written password with little to no difference between letters and numbers.
Example of bad writing
The same thing applies to usernames… While capitalization does not matter with a username, it matters with passwords. Below is a written password that HAS a difference between letters and numbers. Look at the letter o next to the zero in Book. The slash is pronounced and makes confusion a non-issue. The same goes for the 5 and the letter S. Also notice the number 1 where an l (L) should be.
Example of good password writing
To conclude, make note of these trouble letters: L, S, O and their bothersome number counterparts: 1, 5, 0 and you will be well on your way to Sign-On Bliss!
Related Posts: Passwords!
The thing I find most frustrating about passwords, is how almost every site demands a different set of rules forcing you to have more than one or two passwords. I know using generic passwords isn't the safest option, but if you have a strong password that you only have to use, that means you never have to write it down and thus it can be safely kept in your head away from people who are mostly likely to use it to gain access to your private information. The people you come in to contact with in person.
Simplicity is great but hackers often rely on that. I like to use categories for my passwords. This way if one is compromised, ALL of my accounts are not. No skeleton keys here…