Q: password generation

For about 25 years, I have been generating new passwords for my logins
by using the following procedure:
- Open an English dictionary to a random page. If the left hand page
"tens" digit in the page number is even, use the pattern digit-word-
digit-word, else use the pattern word-digit-word-digit
- Open the dictionary to another random page and select the first
word (that I recognize :-)) on the left page
- Open the dictionary to another random page and select the first
word on the right page
- Open the dictionary to another random page and select the "tens"
digit on the left page
- Open the dictionary to another random page and select the "tens"
digit on the left page
- Using the pattern selected earlier, form the new password

Recently, I have modified my technique to include "special" characters
by using the digits generated to select the character above the
appropriate number key on the keyboard (1 = '!', 2 = '@', etc.),
choosing whether to use a special character or a number based again on
the tens digit of a random page selection.

Is this method "secure"? Are the password reasonable?

I thought of using a similar method to write a generator using a
secure random number generator (java.security.SecureRandom or
something similar in Python) and a LONG list of English words that I
found on the 'net.

Any thoughts?

Are my accounts going to be attacked now that people know how I
generated my passwords :-)?
.

Relevant Pages

  • Re: Password hashes
    ... There is no such thing as an NTLMV2 hash. ... While I am a believer of enforcing complex passwords the bigger issue is if ... computers you need to review the physical security of your computers. ... > broken up into two 7 character units. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: [Full-Disclosure] Senior M$ member says stop using passwords completely!
    ... hash security. ... > generating dictionary lists using different character sets for the ... secure or it isn't, for the level of computation possible by today's ... Yes, good passwords are always a must, along with a good ...
    (Full-Disclosure)
  • Re: Someone said 256 bits is not enough
    ... the "chosen by humans" in "passphrases chosen by humans are not ... Considering about 4 bits entropy per character ... I would like to ask about passwords for myself. ...
    (sci.crypt)
  • Re: how to change the existing password settings on FC3
    ... atleast 1 alphanumeric character, atleast 1 upper case character and there ... non-alphanumeric chars. ... away with shorter passwords by mixing characters. ... B = passwords from 2 character classes ...
    (Fedora)
  • Re: 33 character encrypted passwords in /etc/shadow
    ... If the 33 character passwords look like: ... then the passwords are using M5sum instead of old DES passwords. ... Depending on the version of Red Hat Linux you are running this can come ... Linux are there. ...
    (Incidents)