The background on this post is based on two sources. One is that recently a relative remarked having an email account hacked. The relative will remain anonymous. This occurred about the same time that I was studying one of the chapters for the COMPtia Security+ exam (SY-401) to update one of my IT certifications. So I decided that I should try to impart some wisdom related to the problem since may of you readers (those of you in IT or with some experience are excluded) don't really deal with the issue a lot. You can guess the topic from the post's name I hope.
You've probably heard it on the news in quick little morning show segments that try to put a nice face on the problem, but the point is usually pretty important. Sometimes the information is really good. But you can never really tell if the segments are any good. But I digress.
You really need to pay attention when you are designing your own passwords. Yes, the statement so important I needed to bold and underline it. Usernames and passwords are the way computer systems identify that you are you to put it simply. The pair acts as the key to the gateway that is your identity in the digital world. If someone is able to guess your password easily through either a brute-force method (where they are able to guess your password) or through a password-cracking program, they have the ability to become you. Yes, identity theft in the simplest description.
So, here are some recommended things that I have learned and I hope you consider when creating a new password.
- You should make your password as long as possible. Most experts recommend a minimum length of eight characters (letters, numbers, "special" like &*%$, etc.). Some suggest as long as fourteen characters as a minimum. This makes it almost impossible for a hacker to guess using a brute-force method and almost impossible using a password-cracking program (if the computer has enough processing power any password can be cracked given enough time).
- The password should be made up of a combination of characters. There needs to be at least one lowercase letter, one uppercase letter, one number, and one "special" character. This makes the password more complex and harder to crack.
- Don't use a password that you can find in the dictionary without altering it in some way. Many of the password cracking programs will search through tables that have all the words of the entire dictionary stored. It will take a while for the program to search for the word, but it will find it. So if you, say use the word stealthy, you need to alter it in such a what that it can't be easily recognize, such as, for example, s7&aL7y*!4.
- Definitely don't use a word that someone can associate with you. You have all heard the term "social engineering" I hope. There are people out there who use methods to learn your habits any lifestyle just to somehow get into your digital life. The methods could be anything like flattery, bullying, impersonating friends and loved ones over email. Those are just a couple of the ways If you use something like your child's name, pet's name, your profession, anything that is associated with your life you are helping the social engineer to discover a way into your digital life.
- Do your best not to write your password down. If you do write it down, do NOT put it on a "sticky note" or an item out in the open for someone to discover. I know, passwords, especially long ones can be hard to remember. Everyone wants to put the password somewhere so it can be easily accessed. But it should never be out in the open or somewhere that is easily accessible to anyone who can walk into your office. If you have to write it down, write it down somewhere no where near your computer that someone cannot easily access it. If you keep it on you smart phone, get a password storage program that will encrypt the password (make it difficult to read). Regardless, guard that password like it is life or death since IT IS YOUR DIGITAL LIFE.
- Don't use the same password for all of you online sites. If someone guesses your password and you used it at multiple places, it won't take much for the hacker to discover the other places you have accounts and get access to those other accounts.
- Don't share your password with others unless you absolutely trust them. Even then don't do it. You don't want them to accidentally give it to someone else.
- Change your passwords as often as possible. The longer a password is out there, the more likely it will be discovered.
- When you change your password, don't use the same one over and over again. If you change the password to the same one as before, you're not really changing the password and you have the same problem as mentioned in the previous step.
Oh, and this includes items such as your wireless routers at home. You really need to set up the password on that router if you haven't done so and make sure you set up the encryption correctly with long wireless keys to insure someone isn't able to break into your network and use it for his/her own purposes. There are people who will go around with wireless antenna searching for wireless signals that are easy to crack or are wide open.
Well, that's enough for now I think. If you haven't been bored senseless I hope you find it of some interest or help.
References:
No comments:
Post a Comment