Security Information

Password Security and Safety


There is nothing more important that password security in world of technology. It is the first step to creating a safe and secure environment. If your password becomes compromised, there are limitless consequences to what could happen. There are a few very important factors in keeping your passwords safe and secure that everyone should adhere to.

Do not tell anyone your password
No one should every know your password, your bosses, your friends, or your bank. None of them should ever know your personal passwords. Any help desk, company, or organization will have administrators or technicians that can reset your password if they need to do something with your account. Organizations will never ask for your password over the telephone or e-mail!

Do not write your passwords down
The key to a good password is one that you can remember easily, but is hard to guess. It's very important not to write your password down. Hiding it inside your desk, a book, in a picture is just waiting for someone snoopy to find it. Some organizations will require the writing down of passwords, but generally these are Administrator positions and the password books are locked up in a controlled safe or secure location. Your boss shouldn't have all your personal passwords in his desk!

Be aware all the time
When you are entering your password at the computer, or at a bank machine, be aware of who is around you. If you think someone is trying to look at what you are typing, ask them to step back, turn their head, or cover up the keyboard or keypad with your other hand. If you think that anyone may have your password or has seen you enter it, change your password immediately.

Do not use the same password
Far too many people only use one password for everything they do, it makes it easier to remember, but compromises their security. If you use the same password for chatting on a web forum and your online banking password, you are just asking for trouble. Use unique passwords for different projects, websites, and logins.

Password complexity
Password complexity is a very important issue with most users. Often users will have small passwords that are very simple because they worry about trying to remember them. It's very important to have a password that is complex enough to stop people from guessing it, or using automated programs to randomly break it. I will outline good and bad characteristics of passwords below, along with some tips for creating passwords.

Avoid bad passwords, or easily guessable passwords
There are many characteristics that are considered bad when it comes to choosing a password. These characteristics should be avoided at all costs to help keep your password as secure as possible.

Don't use personal information in your passwords. Passwords that contain your date of birth, pets, drivers license number, social insurance number and similar information should be avoided. This also means person numbers of your children, friends, and family also!

Make sure your password is adequately complex, don't use passwords like: kenken, dog, sex.

Stay away from incremental passwords! If you use a password like HiThere1, don't change your password every few months with HiThere2, HiThere3. Create unique passwords each time.

Don't reuse your old passwords even if you haven't used that password in 3 password changes, keep away from reverting to your old passwords.

Don't use words from the dictionary. Passwords should be original conceptions, with no words that could be guess be an automated program.

Notes on character substitution I mentioned in the last point that dictionary words should be avoided. This is very true, but in addition to that, there are now dictionary attacks that integrate common slang spellings and special characters. For those of you who were on the internet and BBS world, the old KRAD, elite speak, can be just as easily guess as a properly spelled word from the dictionary. A couple of examples of what I'm talking about are, "elite speak" could just as easily be "l33t sp34k", "project" and "pr0j3ct". Don't rely on character substitution as a means of securing a simple password.

Creating a good password
Creating a good password is the key to your personal security. Keep these rules in mind when choosing your passwords:

A password should be over eight (8) characters in length.
Do not use dictionary words.
Do not use character substitution such as "l33t sp34k"
Do not user personal information
Do not use variations on your userid or login name
Use both upper and lower case letters (a-z and A-Z)
Use numbers in your password
Use special characters (% # @ *)

Remembering passwords
Everyone knows how frustrating it is to remember passwords, but there is one way that seems to help many people. Trying creating your password using a Mnemonic Device.

"I like money, give me your money!" could translate to: Il$,gmyM! "Oh, I wish I was an Oscar Myer Weiner!" could be: OH,iwIwaOMW

Simple phrases that are easy to remember for you seem to work the best.

"I live in Toronto, Ontario, Canada EH?" - iLiTOCeh?

Ken Dennis
http://KenDennis-RSS.homeip.net/


MORE RESOURCES:

GulfNews

Iraqi PM: immunity remains sticking point in security pact
Xinhua, China - 12 hours ago
... had made concessions in the negotiation of a bilateral security treaty, but the immunity for American troops and civilians in Iraq remains unsolved. ...
Iraq's FM: 'Bold' decisions needed on bases deal The Associated Press
Negroponte Calls Security Deal on Iraq ‘Close’ New York Times
Iraqi leaders seek to secure US funding, indirectly Stars and Stripes
AFP - ISRIA (subscription)
all 526 news articles


Wired News

US Security Agency operators eavesdrop on Americans abroad
Press Trust of India, India - 21 hours ago
New York, Oct 10 (PTI) The US' National Security Agency's (NSA) intercept operators spent their time eavesdropping on saucy conversations between Americans ...
Inside Operation Highlander: the NSA's Wiretapping of Americans ... Wired News
Will Senate actually investigate NSA spying on Americans? CNET News
US Spies on Americans Intimate Calls Islam Online
New York Times - Los Angeles Times
all 140 news articles


Trend Micro Presents 'The Marriage of Security and Cloud Computing ...
MarketWatch - 7 hours ago
Security experts predict over 25000 new threats per hour by 2015, lengthening a security provider's "time to protect" -- the overall time it takes for ...


Boston Globe

Elections officials deny illegally purging voters
The Associated Press - 23 hours ago
The New York Times based its findings on reviews of state records and Social Security data, and said it had identified apparent problems in Colorado, ...
Colorado to Review How It Purges Voters’ Names New York Times
Battle For The West: Voter Roll Purges in CO and NV, State ... Huffington Post
NC to change the way it vets its new voters News & Observer
WSBT-TV - New York Times
all 672 news articles


Boston Globe

Iran opposes US-Iraq security deal
The Associated Press - Oct 9, 2008
TEHRAN, Iran (AP) — A top Iranian military official on Tuesday urged Iraq to reject a proposed US-Iraqi security deal, calling the agreement a "disgrace. ...
Iran reiterates support for security in Iraq Tehran Times
Iran opposes US-Iraq security deal International Herald Tribune
The Health of the "Sick Man" Dar Al-Hayat
MehrNews.com - ISRIA (subscription)
all 274 news articles


The Associated Press

Ford shares post 8th-straight day of declines
Forbes, NY - 2 hours ago
The low marked Ford's lowest share price since May 31, 1983, according to the Center for Research in Security Prices at the University of Chicago. ...
GM shares fall 30 percent after S&P statement The Associated Press
GM shares tumble to 58-year low International Herald Tribune
GM, Ford stocks screech to record lows Detroit Free Press
DetNews.com - MLive.com
all 296 news articles


Security Bank of California Completes Formation of Bank Holding ...
MarketWatch - Oct 9, 2008
reported today that it has established Security California Bancorp, a California corporation and bank holding company. As a result of this transaction, ...


Bush ex-aide says economic woes a security risk
Reuters - 4 hours ago
Frances Townsend, who chaired the Homeland Security Council from 2004 until January this year, said it was vital that the campaigns of presidential ...


Security Bank of California Relocates its San Bernardino Branch
MarketWatch - 5 hours ago
Security Bank of California Forward Looking Statement Disclaimer - General Form This release may contain forward-looking statements that are subject to ...


PCI App Security: Who's Guarding the Data Bank?
PC World - 6 hours ago
To date, the industry has given short-shrift to the needs of application security, and we all have paid for it with continuing data breaches. ...

Security - Google News

home | site map
© 2006