Friday, October 11, 2019
How many of you out there use the same password for every online and offline login? How many of you use common or simple passwords for any of your online accounts, whether a sensitive one or not? And, lastly, how many of you hardly ever change your passwords?
If you fit into one — or all three — of the above categories, you’ll want to read on for some tips on strengthening your passwords. In May 2013, Intel Security even started a holiday — World Password Day — celebrated each May with the intention of curbing one of the fastest growing crimes, identity theft.
So, just how big is the problem? In 2017, 16.7 million people fell victim to identity fraud, breaking the previous year’s record, according to a report from Javelin Strategy and Research. The report also found that some 30 percent of the nation’s consumers were notified of exposure to a data breach that same year — all amounting to $16.8 billion stolen.
You might be thinking that your password may have nothing to do with data breaches. And, while that may be the case (unless, of course, you are the gatekeeper to critical business data), if you use one password for every online account, you’re making it all too easy. Hackers will automatically try the password they may have gained in a breach on the email address that is likely tied to said account, and from there, they could get even more access.
The same could be said for common passwords, such as your name or even “password.” Take a look at the top 20 most used passwords from 2018 and how many people used them, according to the National Cyber Security Center:
Really thinking you’re in need of a better password now? Let’s take a look at what makes a password strong.
A strong password has a few characteristics:
Strong passwords shouldn’t be a dictionary word, or one with numbers replacing certain letters. Other popular passwords that have proven weak are names, sports teams, musicians and fictional characters like Batman or Pokemon.
To drill it in a tad more, you’ll obviously want to avoid a repeated letter or number, or a series of repeated numbers or letters, along with a series of characters on your keyboard (think: qwerty). And, of course, you should avoid any form of personal information, such as your Social Security number or your home address.
Strong passwords don’t have to be a 15-character string of letters and numbers that are otherwise completely unintelligible to you. Some of the best are a combination of words or phrases, with some capitalization and numbers in lieu of certain letters (“3” for an “e”, say).
If you aren’t sure how yours will stack up, you can test your password strength on a number of websites. Just be sure the website is a credible one, such as those that may belong to password managers or any antivirus and/or internet security. It’s also best to try out those that you aren’t likely to use in real life.
Now that you’re on your way to creating an iron-clad password, you’ll want to ensure that it stays locked up. To do so, follow these simple tips:
This may seem like a given, but don’t share your passwords — especially those that are the gatekeepers to your most critical, sensitive information — with anyone who doesn’t need it. Your best friend doesn’t need to know your email login, and your parents don’t need your Google account to access shared photos.
Similarly, you won’t want to write these passwords down and stow them away near your devices, and you won’t want a “master list” of passwords hanging out in your email. That could open the door to even more fraud.
When you first sign up for an online account, you may be prompted to select from a drop-down menu of security questions. What was the name of your elementary school? What is your mother’s maiden name? What is the name of your favorite restaurant? Some will even allow you to select your own security questions. Websites typically use these to ensure a sign-in attempt is, in fact, you, particularly if you’re logging in using a new or different device.
If you are choosing from the list, be sure to implement some of the strong password tips above, especially if the answer is pretty obvious. If you get to create your own security questions, be sure to make them difficult.
Also known as multi-factor authentication, two-factor authentication is exactly what it sounds like — using two forms of identification to log in. It adds an extra layer of security to your accounts.
For example, if you’re signing in to your email account, you will be asked to input your username and password. Once you’ve done so successfully, you would then be prompted for a different form of identification, like a one-time passcode sent through a text message or a fingerprint scan through your smartphone. To access your email, then, you would need to provide proper credentials for whichever form of two-factor authentication you have chosen.
Password managers are great solutions when you feel like you have too many complex passwords that are hard to remember. Password managers are typically integrated into your internet browser and help keep track of your unique passwords for all your online accounts. Some will even store credit card numbers, three-digit CVV codes and more. All of this information is encrypted and stored away safely from potential hackers. There are free and paid versions, so you’ll want to look really closely into each version’s limitations.
There’s some disagreement on just how often you should change your passwords. Some recommend every 30, 60 or 90 days. But, you don’t want to change them too frequently.
So, what are those occasions when it’s definitely warranted?
Use these five tips to fortify your logins today! And, learn more about how an internet service, like Kinetic Internet, can provide not only speed and reliability, but safety, too!