Quote
With more and more consumers having their passwords compromised on a daily basis, a pair of researchers are floating an idea that they contend will help foil digital credential crackers.
They propose salting a web-site’s password database with lots of false passwords called “honeywords.” Passwords in password databases are typically “hashed” or scrambled to protect their secrecy.
“An adversary who steals a file of hashed passwords and inverts the hash function cannot tell if he has found the password or a honeyword,” Ari Juels of RSA Labs and MIT Professor Ronald L. Rivest wrote in paper titled Honeywords: Making Password-cracking Detectable that was released last week.
“The attempted use of a honeyword for login sets off an alarm,” they added.
Use of 'honeywords' can expose password crackers
Honeywords Making Password - Cracking Detectable (pdf)



. 




