Thursday, August 21, 2008

Tips for Selecting and Protecting Passwords

Tips for Selecting and Protecting Passwords


07/28/2008


by Mr. Power Pass


Passwords are a ubiquitous part of our lives. Some of us punch in dozens of passwords daily: when accessing ATM machines, computers, voicemail systems, e-mail systems, broker or bank Internet services and many others. Often, your most important personal and financial information is accessed by these passwords. To protect your information, password security is vital. Identity theft is the fastest growing crime in the United States, and most identity theft happens as a result of lost or stolen passwords. To protect passwords, consider the following:



  • Avoid using the same password for different purposes. Using the same password enables thieves to more easily access your various accounts.

  • When it comes to passwords, long (eight or more characters) is better than short.

  • Many thieves use what is often called “dictionary attacks” to figure out passwords. Rather than use words or names as passwords, consider inserting numbers or special characters in your password. For instance, instead of ‘Mary,” use something along the line of Ma#r2Y%. This makes it much more difficult for thieves to guess or systematically duplicate your password.

  • Also, consider using several uppercase letters in your password. To take advantage of this, make sure that the password is “case sensitive.”

  • Avoid using personal information, such as the dates of your birthday, your dog’s name or your spouse’s name. These are too easy to guess once a thief gains some personal information about you.

  • Thieves have been known to set up duplication software on computers in kiosks, Internet cafes and even libraries. This software enables them to track keystrokes and, thus, gain information about passwords. To thwart this, type in a long string of letters, keystrokes, and special characters, making sure that the string includes all the characters of your password. Then, cut and paste the individual characters of your password into your password field. It’s virtually impossible for duplication software to track individual characters when using this technique.

  • Change your passwords frequently. You leave yourself vulnerable when you have the same passwords for months or years at a time.

  • It may sound improbable, but some people write their password on a sticky note and attach it to their computer. Avoid writing down your password, and never share your password with anyone.

  • When leaving your computer for any length of time, be sure to log out -- even when at work. You’ll have to log in again, but the few added seconds are worth it.

  • When surfing the Web, use the strongest available encryption if you are transmitting your password across the Internet. Many Web sites offer an option to use a secure login.

  • When you have personal information that is highly confidential, store it on a CD, Zip disc or other portable storage vehicle that you take with you, rather than leaving the information on your computer’s hard drive.

  • Be aware that some sites may not allow special characters or upper-lowercase distinctions when creating passwords. Review the site’s recommendations when choosing your password.
In conclusion, password protection is a matter of awareness. When typing in a password while in a public place (ATM, library, kiosk, etc.), make sure that no one can see what you’re typing. Keep your passwords in a safe place so they don’t fall into the wrong hands. And change your passwords often, especially when you feel they may have been compromised, or when others have used them (even trusted friends or associates).