Your password stinks

Okay, your password might not stink. But it probably stinks, since most people have rotten, foul, shouldn’t-ever-be-used passwords.

Passwords aren’t fun, but until SQRL is ready you’ll need to use them. There are some super-basic rules about creating passwords that you really shouldn’t break.

Make your password unique

This is the hardest one to do, although it’s easy to understand. Don’t use the same password for more than one service.

Why not?

Suppose you have a Facebook account and an account with another service, (I just made that up, and the domain isn’t registered, so feel free to grab it). has a security breach (imagine) and your email address and password are now in the hands of nefarious cybernasties.

What do the cybervillains do? They head immediately over to to see if your email address and password from will log them into your Facebook account.

Now the bad guys can read your stuff and impersonate you.

And since you used the same password for your email, they get access to all your other services too, by using the “forgot my password” links.

You could have prevented this by using a different password for each service.

Change any password someone else gave you

Often your initial password is given to you by a person or server. Change it. Otherwise, it’s possible someone knows it, or it’s printed out on a master password list somewhere. Don’t tempt anyone to use it.

Don’t use a word for a password

Those are easy to guess, and the cybercrooks try them first. Capitalizing the first letter isn’t much of a barrier either. Don’t use a word, especially monkey.

Don’t use something people will guess

Don’t use “amazon” for your password. Don’t use the names of your spouse or kids or dog or workplace or anything about you or the site you’re visiting.

Use a long password

Like, really long. Try more than the 8-character minimum that most services require. Try 10 characters, or 12. It takes a second longer to type it in, but it takes centuries longer for the cyberjerks to figure out.

Use multiple character types

Easy passwords use all lowercase letters, or maybe they start with an uppercase letter. Some services require a capital letter and a number, so people use things like Monkey1. Mix it up a little more than that, and include “special characters” like punctuation.

What’s a good password?

I can’t tell you a specific good password, because then it won’t be good. But here’s the sort of thing you’re looking for:



That’s a good type of password, because

  • it’s not a word
  • it’s not guessable based on what you know about me or where I’m going
  • it has lowercase and uppercase letters, digits, and symbols
  • it’s long (10 characters)

I can’t remember one of those for every service I use

You might not be able to remember dozens of those passwords (and so you’re tempted to write them down – don’t do it!), but you can remember one. So memorize it, then set up a password system for yourself using the password you memorized as a base password.

For example, maybe you modify that password based on the site you’re going to. Suppose you want a password for Mix something from Amazon with something from your base password:



I took the second and third letters of Amazon (m and a) and inserted them after the first two characters of the base password.

How about for Facebook?



If you can remember the base password, you get a (nearly) unique password for each site without having to write it down.

Don’t use this exact algorithm. Come up with your own that you can remember and that you’re comfortable with.

But stop writing stinky passwords on a sticky note on your laptop.

We have to stop pretending… #MakeSchoolDifferent

I’m responding to Sue Dunlop’s challenge (which is the result of a series of challenges stretching back to Scott McLeod). I’ve only read a few of the other posts that this challenge has generated, so I apologize to anyone who already expressed these same thoughts.

  1. We have to stop pretending that it’s okay to complain about someone else instead of offering them support.
  2. We have to stop pretending that telling people to learn how to cope is an effective strategy for dealing with mental health challenges.
  3. We have to stop pretending that evaluation can be both objective and accurate when implemented by a single human.
  4. We have to stop pretending it’s acceptable and reasonable for reporting periods to dictate the pace of learning in our classrooms.
  5. We have to stop pretending that there is a single, correct solution to any one of these complex problems.
  6. We have to stop pretending that we can do this on our own.

Oops, that’s 6. Ah well.

The tagged? David Jaremy, Peter Anello, Tim Robinson, Eva Thompson, and Doug Peterson. Additional apologies if you’ve already been tagged.

Tweets from #OTRK12

Here are some tweets that I wrote, retweeted, or favourited during OTRK12. I still have to write my OTRK12 reflections in a post, and a summary of the session I hosted. Hopefully I’ll get those done this week. In the meantime, here’s OTRK12 in bite-sized chunks:

Tweets and Retweets

(Note: “the” = “they” in above tweet. You knew what I meant, right?)


How I Use Twitter Professionally – Version 4

Two and a half years ago I wrote How I Use Twitter Professionally, then revised it with How I Use Twitter Professionally – Updated! and How I Use Twitter Professionally – Updated Again!

I guess we’ll make it an annual thing:

My tweets are public.

I’m trying to encourage conversation and collaboration, so my tweets are globally accessible. This also means I don’t make statements I wouldn’t be comfortable with anyone reading – my family, my students, my employer….

I don’t follow a lot of people.

I currently follow 370 people, of whom about 250 are actively tweeting (let’s say at least weekly). Some of these aren’t related to education; for example, I follow The LEGO Group (@LEGO_Group) and authors John Scalzi (@scalzi) and Marko Kloos (@markokloos – he has a new book out today!).

I can’t read all of the stuff they tweet. I’m relying on my tweeps to retweet the really good stuff so I have a better chance of seeing it, or to mention me if it’s something they think I ought to notice.

I accept anyone as a follower, pretty much.

Except for a few obvious accounts, I let anyone follow me. Since my tweets are public, anyone can read them (even without a Twitter account), so letting people follow me doesn’t reveal anything extra. Plus, it’s easier when you don’t have to approve people.

I don’t follow back as a courtesy.

Before I decide to follow someone, I take a look at their tweet history. Is their stream of tweets going to enhance my experience? Will I learn from them? Or will I only learn what they had for breakfast?

I’m a fan of some personal stuff on Twitter, but if you post 300 times a day just to talk without conversing, I don’t need to see it. It’s not about you, it’s just that your use of Twitter doesn’t fit with mine. I think your lifestyle on Twitter should be like the Law of Two Feet: if it’s not working for you, move on.

I don’t accept Direct Messages (DMs) from people I don’t follow.

This cuts down on the spam. Now it’s just mentions, and there aren’t too many of those. This is a good idea for anyone, so I thought I’d list it here.

I also don’t follow people who I don’t want to DM me. That especially includes students. I have my school email for that kind of communication.

I follow hashtags for a while.

I follow #OTRK12 (our annual conference in Mississauga – this week!) and #elADSB (for my Board’s e-Learning teachers). I don’t follow the very busy tags, although I sometimes apply them to my posts (#D2L, #onted, #blendedlearning, #edtech).

I try to follow the people in Northern Ontario. We face many of the same issues, and perhaps we have solutions to help each other. I like that idea.

I don’t cross post to Facebook anymore.

I tweet too much. No one on Facebook wants to read all of that stuff. The handful of FB friends who do are also Twitter users and teachers, so they just go to Twitter to find me. When I write blog posts WordPress will publicize them on Facebook, Twitter, and Google Plus, and I’m certain that’s plenty for the FB crowd.

I use Tweetdeck; it rocks.

Chrome has TweetDeck as an app; I like that I can have columns for a variety of things I want to look at. Currently I have my Twitter timeline, my Twitter Interactions, my Twitter Messages (DMs), and columns for a bunch of hashtags and lists I follow.

I say things for myself, and I say things for others.

I tweet things that I want to remember or revisit (great for “note-taking” at a session/workshop/conference). I also tweet things to inform others or start conversations. My tweets (of links and such) aren’t endorsements, but since people sometimes view them that way I try not to share stuff that I’m not at least familiar with.

I talk a lot, but not too much

I try to ask questions and help out when others ask questions. I’m proud to say I am included as an honourary member of the SGDSB educators list because I help out the teachers up there, so I think my contributions are valued.

More importantly, I’m developing relationships with these distant folks, and the growth of my PLN has helped me out in my work as well. It was very exciting last year at OTRK12 to meet people whom I knew only through Twitter, and it was surprising how natural the face-to-face interactions felt. We were already friends. So thanks, tweeps.

If you want to follow me…

I’m @bgrasley. No pressure, of course. Use Twitter however it works best for you, and don’t be upset if other people use it differently!

Session Preparation for #OTRK12

Yup, On The Rise is this week. It’s hard to believe we’re that far into the school year already, and it’s harder to believe that it’s been over year since OTRK12 2014.

This year I’m very happy to be presenting on Friday morning. The session title is “How To Become An EdTech Leader” and it’s for school and system leaders. Here’s the official description:

What does it take to be a leader in educational technology (EdTech) today? You don’t need to be a technical wizard. You do need to be willing to connect to a community, listen to others, and share what you’re doing.

We’ll talk about how to create or join different kinds of communities online. We’ll explain some different roles you can have. We’ll have hands-on time for you to get started using a platform of your choice based on your personal goals. And we’ll look at the challenges you can experience trying to lead at different levels of your organization (and propose some solutions!).

You’re coming to this session because you want to be a better leader with EdTech. If you’re a highly connected, social media guru, you probably want to go to a different session.

Did I mention it’s only an hour long? Yup, it’s a big topic. I’m paring down the stuff I’m going to talk about, and I think I’ll have to write an obscenely long blog post to get the rest of it out there.

My basic outline for myself is the following:

  1. Introduce myself (and participants, if there aren’t too many)
  2. Share some types of communities
  3. Develop some goals that participants might have as leaders
  4. Share some roles or stances that leaders can take
  5. List some possible/preferred online platforms
  6. Share challenges/cautions and solutions/suggestions to go with them
  7. Breathe a bit

I’m definitely feeling the time crunch. Sadly, I’m more verbose in person than I am in writing (shocking, I know), so I’ll need to strictly monitor myself. Of course, the actual path I take during the hour will depend on the other learners in the room with me.

Suggestions are very welcome, as always.

A good time was had by all

Yesterday was International TableTop Day, and our family celebrated. We had a big stack of games ready to go, and we played the following: 

  • Magic: The Gathering (even Kerri, out of pity for me)
  • Crazy Eights
  • Chicken/Dice/Ten Thousand
  • Sorry
  • Wizard
  • Checkers
  • Chess (rules heavily modified/ignored by my 7yo)
  • Cribbage

And today we played more games because they were on the table this morning. Everyone agreed that it was a great time, and a fantastic way to be with family. My daughter asked if we could do that every Saturday :)