(Quote)

cPanel Reseller

The XKCD password scheme posted by @umz above has been discussed for a long time. Some disagree on how secure it is. Here is an essay by Bruce Schneier, which would be a good place to start:

(Quote)

(Quote)

I have completed overhauled my password management stack. It's called Nunya.

A good password, close ports, whitelist in FW only specific IP's. Don't have static IP at your home network? Use a jump box. Can't get f* if your ports are closed by firewall.

Then do it manually for now (files via FTP/mysql dbs etc) and if they manage to enable it before server dies you will do a "proper one" -for now at least you will have sometning and

The top three most used passwords are 123456, password, and 12345.

(Quote)

I use a couple, one for a ftp/smb/nfs share and one as entry point to route everything over IPv4 in house (port forwarding, ACL, VPN). Got them for free, second had, one 1 GB, the other 2.

(Quote)

(Quote)

* Make sure to wipe all the passwords from the shadowfile. Do not leave any provider auto-generated password there because they will all leak from your provider's WHMCS database once he inevitably get

* disabling password authentication

This seems to be the main influencer along with ChallengeResponseAuthentication no. With passwords or challenges enabled you get a lot of tries, with both disabled barely enough to be an annoyance. I

NYCB009 (VPShared/cPanel) is continuing to have several issues. We are currently attempting to restore controls, but it still requires a kernel patch and firmware update for the RAID controller.

(Quote)

Link copied from the cpanel.

Is it really necessary? It complicates things if you want to access from elsewhere and anyway with root/password auth disabled, OTP required and Fail2ban banning after just one failed attempt, do you