The authorities have requested users to change their passwords in order to avoid any misuse of their accounts. Authorities say the information connecting with payment or billing was not leaked, whereas email addresses, encrypted account password, summoner name, date of birth, and for a small number of players – first and last name and encrypted security question and answer have been stolen.
‘League of Legends’ store passwords in an encrypted form. Even if the passwords are stored in encrypted form the use of too easy passwords make all security measures worthless. Users are requested to create complex passwords or more preferably pass-phrases for better security.
Complex Password: A complex password is a combination of uppercase & lowercase alphabets, numbers and special characters. When such combination is used the number of combinations to try while cracking passwords is increased and also as such combinations are not found in standard dictionaries hence a dictionary attacks does not work.
An example of complex password is: R@45ip#a$25
Pass-phrase: A pass-phrase is a use of phrase instead of a word as secret to validate your identity. It works absolutely similar to passwords the only difference is the length of the secret. If an application allows you to create a longer password you can use the phrase instead of a word. The advantages include it is longer but easier to remember, a phrase cannot be found in standard dictionary, takes long time to crack by applying all combinations.
An example of pass-phrase can be: “i like watching thriller movies”