Crafting Quality Passwords: Your First Line of Defense
By Kacy Winarski- Systems Manager
As everyones digital footprint continues to expand the need for strong and secure passwords is as great as every. Passwords are the first line of defense in protect your most sensitive information, personal privacy, and financial assets safe online. The stronger and the more unique they are the more difficult they are to guess. You can bolster their strength and security with two-factor authentication and utilizing password storage applications.
Elements of Quality Passwords
Most sites and applications require some level of length and complexity in a password. It may be a small amount like requiring a capital letter or a number within the password, some require at least a certain amount of characters or one of the special characters. Typing more and switching between keyboards on mobile devices can add difficulty to entering a password for some but the more uniqueness that can be added to your password the stronger it becomes. One of the easiest ways to add length is to use a passphrase, it has the added bonus of making it easier to remember as well! Passphrases can also help you avoid common mistakes in passwords like using your or a loved one’s name, birthday, or common words like “Password”.
The other, arguably more common, challenge when creating an org. Chart is the difficulty of adapting to organizational changes, i.e. keeping the chart up to date.
Unique Passwords for Every Account
Reusing a password across multiple accounts is never a good idea. If one account is breached, you have the possibility of other accounts being left vulnerable. Having so many passwords can be difficult to keep track of and I can honestly say that I do not know most of my own passwords. I have no worries about that because I utilize various password management systems to help me access my accounts, and those logins are the ones I do know the passwords for! Accounts like Apple’s iCloud, Google, and 1Password will store passwords and allow you to view those you have saved by providing the master account password. These services also ask when creating accounts or updating passwords if you would like to use one of their more secure passwords with randomly generated characters. Another added benefit is that they see your passwords across many accounts and will alert you if you have a repeated password.
Regular Password Updates
Changing passwords regularly is good digital hygiene, just like you wouldn’t want to wear a pair of socks for years, you wouldn’t want to use the same password for an account forever. Many companies will have you update your password on a regular basis, this could be quarterly or every year. For those that do not require you to update regularly, you can set a calendar date to do some password maintenance on your own. If you are logging into an account for the first time in a while, it is probably time to give that one a password update. If at any point you think someone may have accessed your account, then it is DEFINITELY time for a password reset
Two-Factor Authentication (2FA)
Another layer of security for accounts is to use Two-Factor Authentication. This method when implemented by the account manager, requires the correct user name and password be provided before also prompting for a second way to verify the user. This is usually a code from a text or from a two factor authentication application like Google or Microsoft Authentictor or from another device signed into the acctount. These choices are set up by the account administrator or creator so they will vary account to account and can depend on if they are business or personal account. They usually provide a few choices for how you would like provide the second verification but this will vary by account.
Protecting Your Passwords
Passwords are sensitive data and should be stored, protected and shared only if very necessary. They should be treated the same as other sensitive data like a social security number or a house key. There are plenty of ways to safely store and share your passwords, none of those include a note on your desk or in your phone. Storing them within your web browser or with an app like 1Password or Bitwarden are significantly safer. Should you need to share your passwords with someone else, some of the password sharing apps have the feature built in. If that is not an option, you want to have diversity in how you share the login user name and password. Never email or text all of your credentials together. Should your account become compromised, you should follow the reset password instructions directly from the website or application. Only follow links to reset passwords if you have just requested the password reset yourself.
Conclusion
Your ability to create and maintain quality passwords is your ticket to a safer, more secure online existence. Updating your passwords regularly and using two-factor authentication as much as possible will add more layers of security to your digital life. Invest in yourself and your own peace of mind that you have taken as many procautions as possible to keep yourself safe.
Help Someone. Have Fun, Be You. Learn & Teach. Finish What You Start.
