Secure your identity, computer, network, data and online services with better password security.
We know we should have different, long, hard to guess passwords for everything, but it’s easy to ignore such practice and favour convenience over security. And as we use an increasing number of devices, networks and services, the dangers of using one password for all get ever-greater. So, what steps can we take to improve security while keeping passwords memorable and convenient?
Create better passwords
One tip for hard-to-guess but memorable passwords: replace letters with numbers or symbols that visually resemble letters; for example, ‘Inception2010’ becomes ‘!nc3pt!0n2010’. Or to make things more obscure, use the first letters from a memorable sentence; so ‘My first dog was brown and born in 1981’ becomes ‘Mfdwbab!1981’. This seems obscure but can be recalled using a memorable code. Brainstorm words and phrases that are memorable to you but not others, and apply these tricks to see what you get. Your IT team, or a search online, may offer additional password creation tips that better suit you.
Avoid using one password for everything
Better balance security and convenience
Still favour convenience? If so: list the places where you use passwords, grouped by importance, based on how vital their secure use is, or how much sensitive data they contain. Your top priority list is likely to give impetus to create stronger and different passwords for each. For lesser priorities you may choose convenience – perhaps using one password for all – but at least your sensitive places are more secure.
Or you could mix security and convenience with a password manager; an encrypted software repository where passwords are accessible using one ‘primary’ password. Typically such software offers features including secure password generation, web integration to auto-login to services, and smartphone or web access. Systems fail if someone gets access to your data, so it’s vital to have a strong primary password and store your database securely (which arguably means not storing online). Other weaknesses: you may find yourself without access to passwords in some situations; potential for data loss. To alleviate the dangers, good password managers focus on reliability and offer automated backups. Key advantage: rather than creating memorable passwords you can enjoy easy access to random, secure passwords.
Company password policies
Company policies may demand less autonomy over password creation. For instance, you may require passwords to expire, or set ‘complexity requirements’ such as requiring passwords to contain a minimum amount of letters, numbers or symbols. But, as with personal password security, some balance between security and convenience may avoid weaknesses – such as employees pinning complex passwords to their noticeboards. So arguably, proactively helping employees to create their own secure but memorable passwords could represent a compromise that better balances security and user convenience.
Guide – IT security: the basics