CYBER SECURITY

5 Practical Tips - Good Password Hygiene

Written By Lee Tebby

World Password Day falls on 1st May each year. It is a good opportunity to review, refine and reflect on how you as an individual and you as a business treat, respect and look after your user credentials. In this article we will share 5 practical things you can do and implement in order to keep your details safe and secure.

TIP 1: Sharing is NOT caring!

It may be tempting to give your password to a manager, a colleague or a family member to save time, make it easier or to help them use your account for an application and quickly gain access to some information. This is not good practice when it comes to cyber security, data protection or password health. Each person should have their own set of access credentials, private to themselves and nobody else... NEVER share passwords!

Sharing is quite the opposite of caring in this context and opens up your data and your systems. Imagine the financial and reputational damage if things fall into the wrong hands.

TIP 2: One for ALL and ALL for one!

Imagine if you did not heed the advice in Tip 1? The whole world and his dog would know your username and password. That is even more dangerous if you use the same password for everything and anything. Use a different password for each website and/or application that you use that contains personal and sensitive information. The most important of these is your email password, imagine what people can unlock with all your password reminders being sent to your email.

One data breach and the same password can be used to compromise everything!

TIP 3: The bigger, the better. Size really does matter!

Whilst it is widely known that short, simple passwords are easy to guess, it is also known that long complex passwords containing uppercase, lowercase, numbers and symbols are stronger and more difficult to guess. But how do you keep coming up with memorable passwords that are both strong and secure and that adhere to the guidelines of varied characters.

Many cyber security sources suggest that a phrase or three random words are a good way in which to make complex passwords memorable. If you can tie that back to a story or famous quote it might just help you to dream bigger when choosing your next password.

TIP 4: Get some reinforcements, have something else in your locker!

No matter how complex the password, it is never 100% secure. Cyber security is about creating layers of defence that make it more difficult, deter cyber criminals and encourage them to move on a pursue easier targets. By adding an additional layer such as Multi-Factor Authentication (MFA) requiring bio-metrics, pin code, text message or other form of identification and verification you are doubling your defences.

Cyber security is much like an onion, it should contain many layers.

TIP 5: Forewarned is forearmed!

Consider rolling out cyber awareness training across your business. Raising awareness of the dangers of cyber attacks and cyber threats offers you greater overall protection as people are often your last line of defence. Firewalls, malware protection, spam-filters and anti-virus software contribute to the layered approached we spoke about in Tip 4.

Cyber awareness training will educate users on securing their connection using virtual private networks (VPNs) and warn of the potential risks of public Wi-Fi networks as well as highlight the dangers of clicking on links, not entering credentials into sites that don't have secure certificates (SSL certificates) along with a multitude of other harmful tactics used by cyber criminals.

In Summary:

Passwords are still an important part of everyday life and hold the keys to your kingdom. You would not give the keys to your sportscar to a random stranger, the same is true with your password. If you suspect any account to be compromised, change the password immediately.

Consider strengthening and lengthening your passwords to make them more complex and less easier to guess. Try avoiding your name, pets, sporting teams, family members and partners names in your password as they are easy to guess especially if you share that information on your social media posts.

World password day is a great reason to review your behaviour.