取消服务器的密码安全策略_确保服务器的密码安全

取消服务器的密码安全策略

Password is the only thing that restricts a hacker to enter your web server and damage your data. In simple words, your server root password is your safeguard. Without the root password, you will not be able to log into your own server, and by mistake if your password goes into wrong hands, it may lead to extreme damage you can’t even imagine.

密码是唯一可以限制黑客进入您的Web服务器并破坏您的数据的东西。 简而言之，您的服务器根密码是您的保护措施。 如果没有root密码，您将无法登录自己的服务器，并且如果密码使用不当，将导致错误操作，这可能会导致您甚至无法想象的严重损失。

您可以采取所有可能的措施来确保服务器根密码是完全安全的。 (You can take all the possible measures to make sure your server root password is fully secure and safe.)

• Always create an easy to remember password, but something that is hard to remember or guess for others. It simply means that you should not use things such as your birthday date or your dog, cat names, the information which anyone can find on your Facebook profile.
  始终创建一个容易记住的密码，但是对于其他人来说却很难记住或猜测。 这仅表示您不应该使用生日日期或您的狗，猫的名字以及任何人都可以在您的Facebook个人资料中找到的信息。

• Use more than 8 character to create your password. Some of the authentication systems will ask for entire pass phrases, however, at least 8 characters is normally sufficient.
  使用8个以上的字符来创建密码。 一些身份验证系统会要求输入完整的密码，但是，通常至少需要8个字符。

• Always use numerical digits, alphabets, uppercase, lowercase and even a symbol is fine when creating a root password.
  创建根密码时，请始终使用数字，字母，大写，小写，甚至使用符号也可以。

• Never use the dictionary words, because most of the brute force attacks are programmed to guess such passwords. Avoid using any dictionary words.
  切勿使用字典词，因为大多数蛮力攻击均已编程为猜测此类密码。 避免使用任何词典词。

• Create an unique password for your server access. Keep it unique, and never use it on another places.
  创建用于访问服务器的唯一密码。 保持其唯一性，切勿在其他地方使用它。

• Never share your password. Even, if you want to provide access for your partner, create a new one and limit the access to a particular environment on the server. Remove the user, once the work is done.
  永远不要分享您的密码。 即使是，如果您想为您的合作伙伴提供访问权限，也可以创建一个新的访问者并将访问权限限制为服务器上的特定环境。 工作完成后，请删除用户。

• Every user, client or even you should have a strong password. Its your responsibility to ensure that the passwords are strong.
  每个用户，客户甚至您都应该具有一个强密码。 确保密码安全是您的责任。

Following the above points will ensure that your dedicated server will be completey secure and can be accessed by others as well.

遵循以上几点将确保您的专用服务器完全安全，并且其他人也可以访问它。

翻译自: https://www.eukhost.com/blog/webhosting/ensuring-password-security-for-your-server/

取消服务器的密码安全策略