Password Security

Uncategorized / By

Password Security might seem like an overwhelming task, but it’s a worthwhile effort for protecting your digital life. You don’t need to be a technology expert to protect yourself online. By following some common sense basics, you can create a Digital Fortress that keeps your online information safe and secure.

Your Digital Fortress…

Remember that weird rusty lock on your grandpa’s shed? Well passwords are the digital equivalent of that old lock. Necessary, but often a pain to deal with. So you’re not a cybersecurity whiz, that’s perfectly fine! But even if you lack tech skills, understanding password security is crucial in protecting your digital fortress. Ignoring this basic security fundamental allows the digital burglars to have a field day with your personal information.

Why Should I Care?

What are the secret codes that protect your email, financial information, health information, social media and more? Passwords! Failure to follow password security best practices leaves the gate to your digital castle wide open for cyber criminals to steal your information. Here are some common scenarios to consider.

  • The “Oops, My Bank Account is Empty” – Imagine you clicked on a link in a seemingly harmless email, entered your bank login and password information and the next thing you know is your funds have vanished. Poof! It’s all gone. This email turned out to be a phishing scam and you just provided your password and handed over your money to cyber criminals.
  • The “Identity Theft Nightmare” – You fall victim to hackers accessing your email and obtaining enough of your personal information to open credit card accounts in your name. In a matter of days you’re left with a ton of debt as well as a long, frustrating journey to clear your name and resolve the damage done.
  • The “Embarrassing Social Media Takeover” – Hackers obtain access to your social media account and start posting bizarre and spammy messages from your account. Your personal reputation takes a hit, and you end up spending hours trying to regain control. All because you used “password123” as your social media account’s password.

These aren’t make believe scenarios. These are real-life events that happen every day and Weak Passwords are frequently the culprit. Still a doubter, check out these real-world wake-up calls that resulted from poor pass word security:

  • Ashley Madison Hack – this dating website was hacked due to poor password security in 2015 and the personal information of millions of users stolen and exposed publicly. Both the company and it’s customers suffered reputation damages.
  • Yahoo – In late 2013 Yahoo experienced two major data breaches due to poor password security. The hack affected billions of user accounts.
  • LinkedIn – a massive data breach occurred at LinkedIn in 2012 due to many users using weak and easily hacked passwords for their accounts. The hack resulted in the theft of millions of user passwords and many users having to acquire identify theft services.

As you can see from these incidents, both an individual’s and an organization’s information are vulnerable when poor password security measures are in use. So, arm yourself with strong passwords and a healthy awareness of online caution and go conquer today’s digital world.

Password Dos and Don’ts

In case you’re thinking “I’m not a CEO or a celebrity”, so “Who’d want to hack my account?”. Well, it turns out, everyone’s a target. The movies may lead us to believe that hackers are always after top-secret government files, but in reality, they’re often after everyday information such as bank accounts, emails, etc.. Here are the most common Dos and Don’ts of password security.

What To DO…
  • Create a Password That Would Make a Hacker Cry – The length of your password matters, so aim for at least 12 characters. Mix up the characters by using a combination of uppercase and lowercase letters, symbols (!@#$%^&*), and numbers. Consider using the 1st letter of each word in a random phrase and add symbols and numbers (example: “My favorite flower is the yellow rose” could become this password “MffityR!22$”). And, don’t forget that your passwords should be updated every few months, especially for your important accounts.
  • Use Two-Factor Authentication (2FA) Whenever Possible – Using 2FA adds an extra layer of security for your password. Should someone be able to obtain your password, a second step to verify it’s you using the password is to require entry of a second code to authenticate it is you using the password. This verification process can be accomplished by sending your phone, email, or an authentication tool (such as Google Authenticator) a code for you to enter. This makes it much more difficult for a hacker to break into your account.
  • Consider Using a Password Manager Tool – password managers are similar to a bank vault. These tools will generate unique and strong passwords for each of your accounts without the hassle of you having to remember all of them. Password Manager tools securely manage and store your passwords in your password vault and you only need to remember one master password.
  • Use a Password Strength Checker – use a website such as Security.org’s “How Secure is My Password?” tool to test how strong your password is. These websites will tell you the amount of time it would take a hacker to crack your password. If your password can be cracked by a computer in less than a few centuries, you need to create a stronger password!
What NOT To DO…
  • Same Password for Everything – we know that using the same password makes your tech life simple and easier to manage, but that’s like using the same key for your car, home and office. If one of your accounts get compromised, they all do!
  • Predictable Passwords – using your birthday, kid’s or pet’s name, or the infamous “123456” for your password is the digital equivalent of posting a “Welcome Thiefs” sign on your home and your front door unlocked. Hacker’s have the tools they need to crack these passwords in seconds.
  • Post-it Note Passwords – writing your password down or writing it on a sticky note and putting it on your monitor greatly increases the risk unauthorized access of your accounts occurs. Anyone with access to your physical space, now has access to your accounts.

Related Posts