Passwords are effectively the cornerstone of your business’ data security—if they aren’t up to muster, your protections could crumble. Unfortunately, many users shortchange their passwords to try to make them more convenient, also making them more convenient for cybercriminals. Let’s see how we could (and should) make passwords as effective as possible.
There are two different ways that an attacker will generally try to undermine your password:
Because of this, it is important that you ensure that all the passwords that your users have in place are strong enough to resist both methodologies.
Considering this, it makes sense to keep the following ideas in mind as you put together your passwords and password policies:
For an optimally secured password, you must consider both of these ideas.
There are a few standbys when it comes to password best practices that are likely familiar to you:
In addition to these precautions, we must consider how attackers break into passwords through brute force attacks. To help avoid that outcome, your passwords need to be sufficiently complex as well.
Approximately 40 percent of passwords in use only contain lowercase letters, which enterprising cybercriminals are well aware of and use to their advantage throughout their brute force attacks. They do so by first only checking combinations of exclusively lowercase letters, making their efforts much faster. Each additional variable adds to the difficulty the hacker will have decoding it, potentially convincing them to abandon their efforts before success.
Of course, you still need to remember these passwords, so if you can’t commit it to memory it isn’t going to help you, either.
As a result, an idea has come around that a truly ideal password is made up of a few randomized words with random alphanumeric substitution and capitalization sprinkled throughout them, padded out with symbols. After all, each variable we incorporate makes the hacker’s job that much more of a challenge and could foreseeably stymie any automated efforts to bypass the password long enough to render the search impracticable.
So, in light of this, a good password might look something similar to this:
Taking this password into closer consideration, we can see why it would be nigh impossible to guess, without being impossible for a user to remember. However, its varied construction also means that a brute force method would have to go through an extensive list of permutations before eventually landing on this precise combination.
So, if you’re up to the challenge, it makes sense to consider making your passwords look something like this from here on out.
Of course, using a separate example of a password like this for each account you have is a considerable feat—daunting for most people. A password manager can make it much simpler to keep to these best practices.
A password manager is a specialized software that securely stores your active passwords for you to use, locking them behind a single master password. That way, you can keep to password best practices without having to remember dozens of different passwords.
Whether you need assistance with your IT’s security or your company’s productivity, we are here to assist you.
At Vertisys we work to build trust with our clients to create lasting relationships by imparting our knowledge and experience to develop quality technology solutions. We hold to strong ethical conduct codes and strive to maintain a high degree of integrity in every business relationship. Contact us today to see why businesses throughout the South East trust is with their technology needs.