Strong Password: The meaningless arrangement of numbers & characters only known to you

Often we are given task of creating new login. And when you are creating a login you are supposed to give a strong password as per the company policy. Few characteristic of a strong password are:

• it contains special characters and numbers.
• it contains a mix of upper and lower case letters.
• it has a minimum length of 10 characters.
• it cannot be guessed easily based on user information (birthdate, postal code, phone number etc.)

Credits awyu322

If you give a password which is strong but you are using it every time while creating the login then it is known across the floor that if a new hire comes his first password is same as the one which you might have got. But every time one cannot think of something which is not easy to be guessed and meaningless.


I have a small stored procedure which might help to generate a random word with caps and small letter and includes number as well and you can use them as password. You can pass the length of the password as the parameter, if you do not pass it or if you pass length of 3 or less it will by default take the length of 8. Following is the code for it.

CREATE PROCEDURE [dbo].[usp_RandomString] (
 @Length INT = NULL
 ,@RandomID VARCHAR(255) OUTPUT
 )
AS
IF @Length IS NULL
 OR @Length <= 3
 SET @Length = 10

DECLARE @counter SMALLINT
DECLARE @RandomNumber FLOAT
DECLARE @RandomNumberInt TINYINT
DECLARE @CurrentCharacter VARCHAR(1)
DECLARE @ValidCharacters VARCHAR(255)
DECLARE @IsCapital BIT
DECLARE @IsSmall BIT
DECLARE @IsNumeric BIT

SET @ValidCharacters = 'ABCDEFGHIJKLMNPQRSTUVWXYZabcdefghijklmnpqrstuvwxyz1234567890'

/* include more characters if you need in the above string 
such as @ # $   but make sure you append at the end*/
DECLARE @ValidCharactersLength INT

SET @ValidCharactersLength = len(@ValidCharacters)
SET @CurrentCharacter = ''
SET @RandomNumber = 0
SET @RandomNumberInt = 0
SET @RandomID = ''
SET NOCOUNT ON
SET @counter = 1

WHILE @counter <= @Length
BEGIN
 SELECT @IsCapital
  ,@IsNumeric
  ,@IsSmall
  ,@ValidCharacters

 IF @counter >= (@Length - 3)
 BEGIN
  IF @IsCapital = 1
   AND @IsSmall = 1
   AND @IsNumeric IS NULL
   SET @ValidCharacters = REPLACE(@ValidCharacters, 'ABCDEFGHIJKLMNPQRSTUVWXYZabcdefghijklmnpqrstuvwxyz', '')

  IF @IsCapital IS NULL
   AND @IsSmall = 1
   AND @IsNumeric = 1
   SET @ValidCharacters = REPLACE(@ValidCharacters, 'abcdefghijklmnpqrstuvwxyz1234567890', '')

  IF @IsCapital = 1
   AND @IsSmall IS NULL
   AND @IsNumeric = 1
  BEGIN
   SET @ValidCharacters = REPLACE(@ValidCharacters, '1234567890', '')
   SET @ValidCharacters = REPLACE(@ValidCharacters, 'ABCDEFGHIJKLMNPQRSTUVWXYZ', '')
  END

  SET @ValidCharactersLength = len(@ValidCharacters)
 END

 SET @RandomNumber = Rand()
 SET @RandomNumberInt = Convert(TINYINT, ((@ValidCharactersLength - 1) * @RandomNumber + 1))

 SELECT @CurrentCharacter = SUBSTRING(@ValidCharacters, @RandomNumberInt, 1)

 SET @counter = @counter + 1
 SET @RandomID = @RandomID + @CurrentCharacter

 IF @CurrentCharacter LIKE '[A-Z]'
  SET @IsCapital = 1

 IF @CurrentCharacter LIKE '[a-z]'
  SET @IsSmall = 1

 IF ISNUMERIC(@CurrentCharacter) = 1
  SET @IsNumeric = 1
END