How Does Password Encryption Work?

What is encryption?

Encryption is the process of securing information by transforming it with an algorithm into a form that can only be readily translated by those that know the algorithm used to make it. A simple encryption might use an algorithm which replaces a certain letter with another letter every time it appears. Encryption is used used to privatize information by turning records of the information into a jumble of nonsensical characters. Encryption has historically been used in government correspondence, especially in the military, but since the convention of the computer and the internet, encryption has become an important part of securing vital information such as passwords and preventing identity theft.

Computer password encryption

When someone uses uses a password on a computer, the password goes through an encryption process that changes the characters used into a string of characters that is usually much longer than the password itself and will appear to be completely random. Most password encryptions work as a one way check for password validity: the algorithm used always transforms a given password into the same string of characters. When a password is entered, it is run though the algorithm, and the encrypted string of characters produces is compared to the encrypted password that is stored, and if they match, the password is accepted. Good encryptions will transform a given password into a character string that is nothing like the string produced by the same password when a typo is made.

Password and encryption strength

Password encryption is a necessary security measure to protect sensitive information, but even the best encryption systems are not perfect. Weak encryptions that use simple algorithms produce character strings that can be attacked directly. Stronger encryptions can still be cracked through volume, or brute force attacks where each possible password is tested. Preventing access to the encrypted password is the only way to ensure it the encryption itself cannot be attacked, but still, passwords may be vulnerable to guessing strategies. People often use parts of real words in passwords, or use words or numbers that are of familiarity and importance to us. This makes passwords easier to remember, but also much easier to crack. Using the same password for many different programs and internet sites is also common for ease of use, but again, this makes passwords more vulnerable. For maximum protection, using a different string of random characters for each password is best.

Resources

• Computer security
• Random password generation