Discover our blogs

Aerospace | Cranfield University


Agrifood | Cranfield University


Alumni | Cranfield University


Careers | Cranfield University


Careers | Cranfield University

Defence and Security

Design | Cranfield University


Energy and Power | Cranfield University

Energy and Sustainability

Environment | Cranfield University


Forensics | Cranfield University


Libraries | Cranfield University


Libraries | Cranfield University

Manufacturing and Materials

Libraries | Cranfield University

School of Management

Libraries | Cranfield University

Transport Systems

Water | Cranfield University


Homepage / Password Controls

Password Controls



Passwords – the last control that prevents malicious people from accessing everything that you have access to.

It is a good idea to make your password a good one. Your password is valuable to different types of people.

Some people might want to look into your personal life. If they know you or can find out information about you through things posted online, they might be able to guess one of your passwords. If this is your email password they can use email access to reset the passwords on all your other accounts.

If your password is less secure the attacker may simply automate an attack on your password. In this case millions of attempts are levied against your account and weak passwords will be broken.

If your password is leaked it might be a while before the company which lost your password informs you about it.

Where this happens criminals may have access to your password for a long time and you will be unaware of this access. In this case if you are using that password in more than one place the criminals have more than enough time to try numerous sites on the internet to see if that access succeeds.

To help withstand the majority of these attacks a password of decent complexity is your best weapon. Every year a report is published of the worst passwords used. In the majority of cases the very worst passwords are in use by thousands of people

The list is common knowledge, so criminals know about these passwords too and when trying to access an account will use these first.

For this reason it is important to set a secure password which is not on this list.

There are a great many sites that can give advice about password choice


All passwords are guessable and the key is to make them long enough to withstand repeated guesses or an automated dictionary attack.

The currently policy states that passwords must be at least 8 characters, and contain a combination of numbers, symbols, uppercase letters, lowercase letters, and spaces. The password would be free of repetition, dictionary words, usernames, pronouns, IDs, and any other predefined number or letter sequences.

A popular way of constructing passwords is through the use of passphrases – short random words – that, when used with the advice above, can form strong complex passwords.

Long passwords, tend to be cumbersome to use, passwords longer than 12 characters tend to be particularly tough to enter on a mobile device for example. In these cases it is generally recommended to make use of a password manager:

These generate random passwords for you, store all your passwords and so the only password you need to know is the ‘master’ password for the password manager.

For obvious reasons it is very important to make sure that the password you use for the password manager is a highly secure one.

Passwords which are breached are used by criminals in a number of other sites to see if they can gain access. This can occur often months before the account owner is even made aware that their account has been breached. This means that it is critical that each and every password you use is unique (i.e. you do not re-use passwords for different services). This is made easier by a password manager.

To ensure that your chosen password is not one that has been in a previous security breach you can make use of the password checker at Which also offers a notification service if your account(s) ever appear in a security breach (if you sign up to this free service)

Occasionally problems are reported with password managers themselves, however be aware that the stronger the main password (for accessing your password manager) the less likely anyone will gain access to it.

Phil Maud

Written By: Cranfield University

Categories & Tags:

Leave a comment on this post:

Sign up for more information about studying master’s and research degrees at Cranfield

Sign up now
Go to Top