Ungawakha kanjani amaphasiwedi aqinile futhi uwahlole kusuka ku-terminal

Esihlokweni esilandelayo sizobheka ezinye izindlela zokwenza khiqiza amaphasiwedi aqinile avela esigungwini. Kulezi zinsuku, ukubaluleka kwephasiwedi evikelekile equkethe izinhlamvu eziningi, izimpawu, izinombolo, njll. Kugcizelelwa ngenkuthalo nangokungenzi lutho, ukuze kuliqinise futhi kungabi yinto elula kwabanye lapho bethola imininingwane yethu.

Wonke umuntu uyazi ukuthi namuhla amapulatifomu amaningi asicela iphasiwedi ukuthola izinsizakalo zabo, i- imeyili, ukufinyelela kwi-intranet yehhovisi, ukufinyelela emabhange, njll., futhi uma singenayo i- iphasiwedi eqinile, kungekudala singagcina sinezinkinga ezinkulu zokuphepha.

Amaphuzu ajwayelekile okufanele acatshangelwe ukudala iphasiwedi evikelekile, ezinzile futhi eqinile yilezi ezilandelayo:

• Kumele sisebenzise izimpawu, izinombolo, ofeleba kanye nezinhlamvu ezincane.
• Ungasebenzisi izinsuku ezibalulekile zomuntu siqu noma zomphakathi, izinombolo zocingo, izinombolo zomazisi, njll.
• Iphasiwedi enhle kufanele ube nenani elikhulu labalingiswa. Ngalokhu nokulandela ukucatshangelwa kwangaphambilini sizokwazi ukwenza iphasiwedi yethu "cishe" ibe nzima ukuthola.

Lapho kufanele sifake iphasiwedi kwenye yamadivayisi wethu, ngokuvamile sisebenzisa eyodwa okulula ukuyikhumbula. Akudingeki ukusho, lokhu kucabanga ezikhathini eziningi ukwephula okukhulu kwezokuphepha lokho kuvumela abaduni ukuba babaxhaphaze ngokuya ngolwazi abalaziyo ngathi noma ngokuhlaselwa ngamandla Ukuze sithuthukise lokhu kuphepha, kufanele sisebenzise ezinye izindlela zokuphepha, njengokusebenzisa amaphasiwedi angahleliwe esingakwazi ukukhiqiza ngamathuluzi ahlukile.

Ngokulandelayo sizobona izindlela ezahlukahlukene esingadala ngazo amaphasiwedi angahleliwe ngokusebenzisa i-terminal ye-Ubuntu yethu, ngaphandle kwesidingo sesoftware eyengeziwe. Lawa maphasiwedi angasebenziseka ngokuphelele kuzo zonke izinsizakalo ezidinga iphasiwedi eqinile. Akunakuphikwa ukuthi amaphasiwedi akhiqizwa ngezikhathi ezithile kunzima ukuwakhumbula, ngakho-ke kuzodingeka sithole indlela yokuwagcina ephathekayo.

Ungawakha kanjani amaphasiwedi aqinile ku-Ubuntu

Ukubhala lo mbhalo ngisebenzisa Ubuntu 16.04. Ku-Gnu / Linux sinamathuluzi athile asinikeza amandla okwenza ngokuzenzakalela iphasiwedi evikelekile.

Uma ungenawo la mathuluzi, singakwazi ukuwafaka sisebenzisa ukulandelana okulandelayo komyalo ku-terminal (Ctrl + Alt + T):

sudo apt install gnupg2 && sudo apt install openssl

I-GPG

Uma sifuna dala iphasiwedi yethu usebenzisa i- I-GPG, sizokhipha umyalo olandelayo:

gpg --gen-random --armor 1 32

I-OpenSSL

Uma sithanda sebenzisa I-OpenSSL ukukhiqiza iphasiwedi yethu evikelekile, kuzofanele sisebenzise umyalo olandelayo:

openssl rand -base64 32

I-APG

Enye inketho leyo esingayisebenzisa ukukhiqiza iphasiwedi yethu evikelekile yi-APG, Isifinyezo se Okuzenzakalelayo Generator Iphasiwedi. Iza ifakwe ku-Ubuntu nakwizakhi zayo. Ukuqalisa umyalo kuzofanele sibhale kuphela ku-terminal (Ctrl + Alt + T):

apg

Kuluhlelo olwenzelwe ukukhiqiza amaphasiwedi "ngekhanda". Uma umane uyisebenzisa, izokucela uchungechunge lwedatha ongasebenza ngayo, futhi ngokususelwa kulokho izokwakha iphasiwedi "ekhunjulwa". Ngalokhu ngiqonde ukuthi eduze kwephasiwedi izosikhombisa ukuloba kwefonetiki ukuze sikhumbule kangcono iphasiwedi.

Imiyalo yesiginali

Ngaphezu kwamathuluzi esisanda kuwabona, sizokwazi futhi ukusebenzisa uchungechunge lwe- imiyalo ezokhiqiza amaphasiwedi angahleliwe. Kuzofanele ubhale eyodwa kuphela yale migqa ku-terminal (Ctrl + Alt + T):

date +%s | sha256sum | base64 | head -c 32 ; echo
< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-32};echo;  
tr -cd '[:alnum:]' < /dev/urandom | fold -w30 | head -n1 
strings /dev/urandom | grep -o '[[:alnum:]]' | head -n 30 | tr -d '\n'; echo 

< /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c32 
dd if=/dev/urandom bs=1 count=32 2>/dev/null | base64 -w 0 | rev | cut -b 2- | rev
</dev/urandom tr -dc '12345!@#$%qwertQWERTasdfgASDFGzxcvbZXCVB' | head -c32; echo ""
randpw(){ < /dev/urandom tr -dc _A-Z-a-z-0-9 | head -c${1:-16};echo;} && randpw

Ngaso sonke isikhathi lapho senza noma iyiphi yale miyalo, iphasiwedi ezokwakha iyohluka ngokuphelele futhi ngeke ihlobene nanoma yimuphi omunye owenziwe ngaphambilini.

Ungawahlola kanjani amandla e-password ku-Ubuntu

Abantu abaningi bangacabanga ukuthi iphasiwedi oyisebenzisayo inamandla. Ukuhlola ukuthi lokhu kuliqiniso yini, kuzodingeka kuphela ukufaka uhlelo lokusebenza olubizwa ngokuthi i-cracklib. Ingabe ihlaziya zonke izici zephasiwedi bese isinika umphumela. Ukufaka i-cracklib ku-Ubuntu noma i-Debian sizosebenzisa umyalo olandelayo:

sudo apt-get install libcrack2

Setha iphasiwedi

Lapho uhlelo lokusebenza selufakiwe sizosebenzisa i- cracklib-check parameter ukubheka isimo se-password. Isibonelo, sizohlaziya iphasiwedi elula kakhulu futhi edumile. Esigungwini sizobhala:

echo "1234abc" | cracklib-check

Futhi singabheka iphasiwedi eqinile sisebenzisa:

cat|cracklib-check

Kuzofanele sikwenze kopisha iphasiwedi ukuze uqinisekise ku-terminal futhi lo myalo uzosikhombisa umphumela. Uma umphumela ulungile kukhombisa ukuthi iphasiwedi yethu iphephile, manje, kufanele siqaphele futhi sigcine leli phasiwedi endaweni ephephile, uma kungenzeka silikhohlwe.

Imiphumela engenzeka

Singathola eminye imiphumela lapho sihlaziya iphasiwedi yethu. Ezinye izibonelo yilezi ezilandelayo:

• Kufushane kakhulu
• Kususelwa egameni esichazamazwini
• Kususelwa egameni lakho lomsebenzisi