what should my database password include and not include? I'm using mySQL and PHP
4 Answers
Wikipedia actually has a pretty extensive article on the subject of password strength. Definitely worth a read.
Comments
You can read guidelines at http://dev.mysql.com/doc/mysql-security-excerpt/5.0/en/password-security.html
Comments
My personal rule for choosing mysql password are:
- It should be a valid var name.
- It should include upper and lowercase letters.
- Uppercase letters shouldn't necessarily be at the beginning of a word. eg :
woRd - It should be longer than 15 chars.
- It should include include numbers.
- It should never reference the name of my project or something about me.
eg: fLodHooters_25_lightsOn