What’s going on with passwords!
Traditionally we were advised to use passwords to secure our applications and online accounts. These days just using this combination is not enough. As we advance the people who shouldn’t get our information are also getting advanced. With all the data breaches at various big companies a majority of username and password accounts have become public. There are sites where you can go and find if you’ve been a victim. There you can search for your information and be ready to get shocked.
Here’s a link to a very prominent site: https://rehmann.co/projects/10mil/
With the growth in the number of sites where we have to use passwords our capacity to remember them all became difficult, and people started reusing the same passwords (usually with the same username/email). So, if a person wants to get into your account all they have to do is find your normal email address and search the above site for your password and VOILA!!
Here is how you protect yourself:
There are a number of things that we can do and they need to be done systematically.
1. Use Longer Passwords
-Don’t use passwords like “monkey12345”. I’ve seen people change capitalization and call it strong.
-Use minimum 8-10 character passwords. Here “Mickey Mouse” is not what I mean by character (I’ve actually seen someone use this). Characters should be mixed case, with a number AND a special character e.g. @, ! or # etc. I advise users to use phrases like “ILoveDisneyLand5!” That would be a good password. It has 17 characters, mixed capitalization and a special character too.
2. Use Password Managers to keep track of passwords
-Use different passwords for different sites. So if one website data is compromised all your other accounts don’t get vulnerable.
-Use a password manager and stop trying to remember passwords. I have been a big fan of LastPass for years. Others managers include Keepass (for offline storing) and OnePass
3. Use Multi-factor Authentication
-Many (if not most) sites let you use this feature. What you do here is use your username and password (what you know) and then another code is used (what you have).
The Evolving Online World of Tomorrow & How Rezoot can help
The people who really want to get in will get in somehow. Our job is to make it as hard as we can possibly make it. Try and use some of the solutions above and take control of your authentication dilemma. Please call us at Rezoot and we can help with these and other technology related adventures you will embark on.