Strong Passwords (Windows Embedded Standard 2009)

If your run-time image includes support for multiple users, use strong passwords. Weak passwords are a potential security vulnerability and can allow hackers access to your system.

When you implement a user account strategy, consider the following strong password rules:

• Strong passwords must be at least seven characters long. Because of the way passwords are encrypted, the most secure passwords are seven or 14 characters long.
  
• Strong passwords should contain characters from each of the following three groups:
  
  • Letters (A, B, C)
    
  • Numerals (0, 1, 2)
    
  • Symbols (~, !, @)
    
• Strong passwords should include at least one symbol character in the second through sixth positions.
  
• Strong passwords must be significantly different from prior passwords.
  
• Strong passwords must not contain your name or user name.
  
• Strong passwords must not be a common word or name.