Choosing a password

The password complexity we require depends on whether you have shell access¹ to the server. If all you need to do is send files back and forth for your web site, you probably don't have or need shell access. If you're still not sure, it's safe to assume you are not a shell user.

Shell users

Shell users must choose a password that conforms to the general guidelines set forth by attrition.org. If you are a shell user (or wish to be), you will be expected to read and live by these guidelines.

Non-shell users - (email, FTP, etc.)

Non-shell users are greatly encouraged to read the guidelines as well, but we do not require complex passwords in this case. That said, you choose your password at your own risk; if your password can be guessed (by man or machine), rest assured that someday it will be.

¹Shell access means you can login to the server using a command-line terminal like telnet. (We actually use SSH instead of telnet for security reasons, but in the context of this FAQ the differences are negligible.)