password protection
r_mervart
Thanks
roman
Suzanne S. Barnhill
document, and they are *very* secure.
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"r_mervart" <r_me...@REMOVETHIShotmail.com> wrote in message
news:PmNPc.147$aQ3...@newsfe2-gui.ntli.net...
r_mervart
"Suzanne S. Barnhill" <sbar...@mvps.org> wrote in message
news:%235TxRWW...@TK2MSFTNGP09.phx.gbl...
It is Word 2000 (9.0.3821 SR-1) , a part of Microsoft Office 2000
Roman
Suzanne S. Barnhill
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"r_mervart" <r_me...@REMOVETHIShotmail.com> wrote in message
news:jSUPc.1349$4F2...@newsfe6-gui.ntli.net...
Graham Mayor
the password crackers occupied for more time than anyone but a government
agency would think worth the effort.
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Suzanne S. Barnhill wrote:
> Should be adequately secure.
r_mervart
> Should be adequately secure.
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:eWmY%23SfeE...@TK2MSFTNGP11.phx.gbl...
> An 8 digit password with random characters and case will keep the best of
> the password crackers occupied for more time than anyone but a government
> agency would think worth the effort.
So how secure would be such Word document sent to a personal website or just
to an
e-mail address (my own) and left in a "hold" folder which I could create.
This would enable
be an access from anywhere to my personal data at effectively no cost
Roman
Graham Mayor
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Suzanne S. Barnhill
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"r_mervart" <r_me...@REMOVETHIShotmail.com> wrote in message
news:zK3Qc.121$ZL1...@newsfe3-gui.ntli.net...
Avalon
Sorry to contradict you Word Gods but cracking passworded
documents is a piece of cake even if the document was
passworded in Word 2003.
This is due to a lovely bug that was around back in the
Word 2000 days and a 3rd party piece of software.
All you have to do, to gain access to a form passworded
document is:
1. Open a blank document
2. Goto Insert\File
3. Select the pasworded file
4. Click Insert button
Result: The contents and formatting of the passworded
file are inserted into the new document and the password
has been removed.
The Microsoft knowledge base acknowledges this to be a
problem LMAO and that's all
The 3rd party piece of software out there that cracked all
MS passwords including the VBA ones is called
"Advanced Office Password Remover".
The reason i know all the above is, i work for a technical
authoring company that writes military documents and
security is very important to us. We finally came to the
conclusion that the only way to secure a word document is
to PDF it.
That said the company that produces the office password
remover also produces a PDF password remover (grrrrrrrrr).
If you guys find a solution to the above cracks please
post a reply, as they are a real problem for my industry.
regards
Avalon
>.
>
Graham Mayor
document, but it allows you to create an unprotected copy. This is well
documented.
The encryption on Word documents protected against opening is *much* more
secure. There are lots of tools available to crack the passwords - there is
one I have tested linked from my web site - but they all have the same
problem. If the password is complex then they resort to brute force methods
to crack, and this can take a long time.
The demos of these apps. are all limited to a password of 4 characters which
they crack in an impressively short time. Make that password 8 or more
characters and use random characters and symbols with random case changes
and the time scale is dramatically extended. Only the really determined are
likely to persevere.
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Chad DeMeyer
Four types of characters can be used in constructing a password:
a.. Upper case alphabetic (A-Z)
b.. Lower case alphabetic (a-z)
c.. Numeric (0-9)
d.. Special (e.g., /?#$@*, etc.)
Use at least three of these types.
Don't use common words.
Use passwords of at least 8 characters.
Regards,
Chad
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:%23ILjOWj...@TK2MSFTNGP11.phx.gbl...
r_mervart
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
> The form issue is well known. It doesn't allow you to crack the original
> document, but it allows you to create an unprotected copy. This is well
> documented.
>
cracking the original document. Unprotected presumably means that you
can open and read the contents of the copy?.
Roman
Suzanne S. Barnhill
The security comes with "password to open," in which the password is used as
a key to encrypt the entire document.
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"r_mervart" <r_me...@REMOVETHIShotmail.com> wrote in message
news:pgaQc.1008$1Z1...@newsfe6-gui.ntli.net...
Graham Mayor
protection is to deter casual users from altering the layout of the form. If
you put a password to prevent opening of the form then you would have a hard
(but ultimately not impossible) time getting into it.
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
r_mervart
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
> The whole point of a form is that you can open, read it and complete it.
The
> protection is to deter casual users from altering the layout of the form.
If
> you put a password to prevent opening of the form then you would have a
hard
> (but ultimately not impossible) time getting into it.
Just to make sure that I got it right.
1. If I protect a Word document by a password then it is fully protected
from being opened, read and altered and from being in some way made into an
unprotected copy as long as the password is not cracked.
2. More complex password -> better protection
3. Password protection remains with the document regardless where it is
stored, e.g. website, e-mail server
Roman
Graham Mayor
2. Yes
3. Yes
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Suzanne S. Barnhill
About using passwords
Passwords have a number of uses; for example, you can:
* Require a password to open a file to prevent unauthorized users from
opening a document at all.
* Require a password to modify a file to allow others to open the
document but only allow authorized users to make changes to it. If someone
changes the document without the password to modify, that person can save
the document only by giving it a different file name.
Note Requiring a password to modify a file does not encrypt the contents
of the file.
When you create a "password to open" document, write the password down and
keep it in a secure place. If you lose the password, you cannot open or gain
access to the password-protected file.
Passwords are case-sensitive, so if you vary the capitalization when you
assign the password, users must type the same capitalization when they enter
the password.
A password can contain any combination of letters, numerals, spaces, and
symbols, and it can be up to 15 characters long. If you select advanced
encryption options, you can make a password even longer.
Use strong passwords that combine upper- and lowercase letters, numbers, and
symbols. Weak passwords don't mix these elements. Strong password: Y6dh!et5.
Weak password: House27. Use a strong password that you can remember so that
you don't have to write it down.
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"r_mervart" <r_me...@REMOVETHIShotmail.com> wrote in message
news:oWmQc.54$Ua2...@newsfe2-gui.ntli.net...
r_mervart
relying on the password that the document will not be opened, to
additionally scramble in some way or at least disguise the contents before
closing it. In that way, even if someone managed to somehow crack the
password, there would be a second layer of protection.
By the way, do you top post in this group? Elsewhere I was usually told off
for doing that and also told to get rid of the OE (which I did not do)
Roman
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:eFrjuRte...@tk2msftngp13.phx.gbl...
Graham Mayor
there any point in saving the document at all?
If the thing is so secret, don't put it anywhere the public have access.
As for top v bottom posting, there are advocates of both here. As long as
your message is clear and readable I don't think any of us really care which
way round you do it. personally I prefer not to have to wade through a load
of stuff to get to the meat of the message.
r_mervart
numbers and passwords - and I have number of various accounts, credit cards
etc. There is no way I could remember it all. At the moment all is held on
paper which is not really very safe and because it is on paper it has become
rather messy. Should we be burglared and this paper document was found I
would be in a deep trouble. So I am looking for a good electronically
editable alternative to my Filofax. If it was held only locally on my
computer (backed up, of course) it does not allow me to get to some
information that I might need while abroad.
Roman
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:eQRC%23MweE...@tk2msftngp13.phx.gbl...
Graham Mayor
have no trouble remembering numbers so I don't have to write down any of my
account numbers or PINs. You could disguise the information in an innocent
looking letter (eg in the form of telephone numbers and text) and even
unprotected no-one would have a clue what it was all about.
Suzanne S. Barnhill
punctuation), it might be a bit difficult to disguise!
--
Suzanne S. Barnhill
Microsoft MVP (Word)
Words into Type
Fairhope, Alabama USA
Word MVP FAQ site: http://word.mvps.org
Email cannot be acknowledged; please post all follow-ups to the newsgroup so
all may benefit.
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:ep86q93e...@TK2MSFTNGP10.phx.gbl...
Graham Mayor
write it down to remember it is ultimately no better than a simple password.
--
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Graham Mayor - Word MVP
My web site www.gmayor.com
Word MVP web site http://word.mvps.org
<>>< ><<> ><<> <>>< ><<> <>>< <>><<>
Suzanne S. Barnhill wrote:
> If it's a strong enough password (containing random upper and lower
> case and punctuation), it might be a bit difficult to disguise!
>
>
r_mervart
Roman
"Suzanne S. Barnhill" <sbar...@mvps.org> wrote in message
news:u5gZWS%23eEH...@TK2MSFTNGP10.phx.gbl...
r_mervart
Roman
"Graham Mayor" <gma...@DELETECAPSmvps.org> wrote in message
news:ueFwoOE...@TK2MSFTNGP12.phx.gbl...