Home Office Security

Home | Windows Security | Email Security | Network-WiFi Security | Online Security | Backup Methods | Threats & Vulnerabilities | Passwords | Tools

Password Security

Let's face it. Most of us have been beaten over the head with lectures on password complexity. It isn't a sexy subject but we are talking about the keys to your castle. A lot of technology and techniques developed to guess or extract your passwords. If someone knows your username, which is relatively easy to obtain, the password part needs to be strong. In technical terms it needs a high level of entropy. I have noticed the trend is to create passwords and replace certain letters with numbers. (Pa55word). This is a pattern that is well known by hackers and the tools they use are designed to anticipate it.
The password alone is not the problem. Re-using passwords for multiple accounts like you bank, email, computer and so on are a huge problem. If one of your passwords are cracked, hackers will try to use these credentials on your other accounts. The best way to avoid crackable passwords is to use a password generator. They are usually combined with a password safe. (link). These tools will generate a highly complex, unique password and save it in and encrypted file. Password Entropy

Password Lockers

Password lockers are the safest way to generate and store your passwords. These tools work with computers and phones. You start by creating a strong secure password as described above (don't use the one in the example). From that point, every time you need to create a password, or login to an account the tool will create or a retrieve a strong password for the account and store it using strong encryption. You can also input your own custom passwords. Next time you visit the site to log in, you will be prompted for the original strong password you created earlier. Your credentials will be automatically filled out for you eliminating the task of remembering many different passwords. (link)

MFA (Multi Factor Authentication)

Many institutions are aware of the problem with passwords being compromised. One solution is Multi Factor Authentication. You have probably used this already. When logging into your bank, you are asked to provide a code that was text or emailed to you by the institution. This is a great way to authenticate that it is you, not a hacker trying to log into your account. It is strongly recommended that you opt-in to these authentication methods when offered.

Test your password strength.