{"id":23216,"date":"2023-10-30T08:39:32","date_gmt":"2023-10-30T16:39:32","guid":{"rendered":"https:\/\/www.palada.net\/index.php\/2023\/10\/30\/news-16946\/"},"modified":"2023-10-30T08:39:32","modified_gmt":"2023-10-30T16:39:32","slug":"news-16946","status":"publish","type":"post","link":"http:\/\/www.palada.net\/index.php\/2023\/10\/30\/news-16946\/","title":{"rendered":"Can you use emojis in passwords? | Kaspersky official blog"},"content":{"rendered":"

Credit to Author: Stan Kaminsky| Date: Thu, 26 Oct 2023 15:02:46 +0000<\/strong><\/p>\n

No one likes passwords. They take ages to enter, are hard to remember, and the need for a number, symbol, uppercase letter, and a couple of hen’s teeth<\/a> only makes creating them all the more difficult. But if you use the same password everywhere, or limit yourself to simple short (read \u2014 weak) passwords, sooner or later you’ll get hacked<\/a>. How to combine ease of input, memorability, and hack resistance? An interesting, if unusual, way is to use emojis \u2014 yes, those same smileys 😁 and other cute icons 🔐 we love to use in chats and posts.<\/p>\n

On today’s computers and smartphones, emojis are just as much full-fledged symbols as letters in alphabets and punctuation marks. That’s because they’re part of the Unicode standard (see here for a full list of standardized emoji<\/a>s), so in theory, they can be used in any text \u2014 including in passwords.<\/p>\n

Why use emojis in passwords<\/h2>\n

Since there are a great many emojis in existence, your password can be twice as short.<\/strong> When intruders try to brute-force a password containing letters, numbers, and punctuation marks, there are fewer than a hundred variations for each symbol they need to pick. But there are more than 3600 standardized emojis in Unicode, so adding one to your password forces hackers to go through around 3700 variants per symbol. So, in terms of complexity, a password made up of five different emoticons is equivalent to a regular password of nine characters’ while seven emojis is equivalent to a strong password of 13 “regular” characters.<\/p>\n

\"Some<\/a><\/p>\n

Some new emojis in Unicode<\/p>\n<\/div>\n

Emojis are easier to memorize.<\/strong> Instead of a meaningless jumble of letters and numbers, you can compose a logical sentence and create an emoji puzzle based on it. For this you can use an emoji translator<\/a> or a chatbot like ChatGPT.<\/p>\n

\"An<\/a><\/p>\n

An emoji translator or ChatGPT can create an emoji-based puzzle-password on a given topic<\/p>\n<\/div>\n

Hackers don’t brute-force emojis. <\/strong>Various hacking tools and dictionaries for cracking passwords include combinations of words, numbers, and common substitutions like E1iteP4$$w0rd<\/em>, but not (yet?) emojis. So when an attacker goes through a leaked password database, your account protected with a 👁️🐝🍁👁️🥫🪰 (“I believe I can fly”) password is very likely safe.<\/p>\n

All this sounds too good to be true. So what are the downsides of emoji passwords? Alas, they’re sizeable.<\/p>\n

Why not use emojis in passwords?<\/h2>\n

Not all services accept emoji passwords. <\/strong>We carried out a little account-creation experiment using a password consisting of several standard emojis. It was rejected by both Microsoft\/Outlook and Google\/Gmail. However, Dropbox and OpenAI happily accepted it, so basically it’s a matter of experimentation.<\/p>\n

\"Not<\/a><\/p>\n

Not every service will accept an emoji password<\/p>\n<\/div>\n

You’ll have to test your emoji password immediately to make sure it works.<\/strong> Even if you’re able to create an account with it, it may not pass verification when signing in.<\/p>\n

Emojis are harder to enter.<\/strong> On smartphones, entering emoji is simplicity itself. On desktop computers, however, it can be a bit more troublesome \u2014 though not excessively so (see below for details). In any case, you’ll have to find the emojis you need in a long list, making sure to select the right picture<\/em> from several similar ones. If you cross-platform, remember to check you can enter these emojis on both your computer and smartphone for all services you use.<\/p>\n

Recent emojis give you away<\/strong>. Many smartphone keyboards display frequently used emojis at the top of the list. This information is unlikely to help online hackers, but friends or family may be able to guess or snoop on your password.<\/p>\n

\"Recent<\/a><\/p>\n

Recent emoji can reveal a lot about you to prying eyes<\/p>\n<\/div>\n

How to create a password with emojis<\/h2>\n

A reasonable compromise would be to add an emoji or two to your password to up its complexity. The rest of the password can then be alphanumeric, and less fancy. Of course, using emojis is no substitute for traditional security tips: using long passwords, a password manager<\/a> and two-factor authentication (2FA)<\/a>. Speaking of which, our password manager<\/a> can both store passwords with emojis and generate 2FA codes.<\/p>\n

\"Emoji<\/a><\/p>\n

Emoji password and 2FA code in Kaspersky Password Manager<\/p>\n<\/div>\n

How to enter emoji passwords<\/h2>\n

The input method depends on your device and operating system. Smartphones have a special keyboard section for this, while on computers you can use one of these options:<\/p>\n