Regardless of your industry or organization’s built-in cyber security protection level, simple passwords are trouble for your employees, network, and sensitive data. With 44% of users reporting recycling passwords across personal and business-related accounts, it's no wonder why stolen credential databases continue to fetch high prices on the dark web. Thankfully, the methods to maintain strong and varied passwords are free or worth the inexpensive price tag.
This article will review the essential concepts of a strong password, explain why each element is important to maintain data security, and offer best practices about information that should never be included in a password.
The Strong Password Kit
Share strong password tips, advice, and best practices with users. Download the Strong Password Kit.
How do I create a strong password?
Cybercriminals know that most people create easy-to-remember passwords and often reuse the same password across multiple accounts. Because of this, all it takes is hacking into one account to access the rest quickly.
1. Do not use sequential numbers or letters
1234, qwerty, jklm, 6789, etc., are some of the first passwords that bad actors will try out. Similarly, brute force software usually tests sequential numbers and letters because they are so commonly used.
2. Do not include your birth year or birth month/day in your password
Cybercriminals can easily find this information by snooping into your social media accounts. The same goes for easy-to-find personal information, such as pet names, addresses, and employer names.
3. Use a combination of at least eight letters, numbers, and symbols
The longer your password and the more character variety it uses, the harder it is to guess. For example, M0l#eb9Qv? combines upper- and lowercase letters with numbers and symbols, making a unique password that cannot be deduced.
4. Combine different unrelated words in your password or passphrase
This practice makes it difficult for cybercriminals to guess your password. Do not use phrases from popular songs, movies, or television shows. Use three or four longer words to create your passphrase. For example, 9Sp!dErscalKetobogGaN.
5. Do not use names or words found in the dictionary
Substitute letters with numbers or symbols to make the password difficult to guess. Or deliberately use spelling errors in the password or passphrase. For example, P8tty0G#5dn for "patio garden."
6. Use a password manager to store your passwords
Do not write your passwords or keep them in a document on your computer. Ensure you're using the password manager tool the IT/support team provided to store all professional and personal passwords. Most password managers also include a handy password generator, so you don't have to create a new one each time.
7. Do not reuse your passwords
Every device, application, website, and software requires a unique and strong password or PIN. Just one reused password can start a chain reaction that can compromise all your accounts.
Information You Should Never Include in Your Passwords
When updating and creating new passwords, please do not include the following information:
Your pet's name
Your birthday or that of family members
Any words related to your hobby, job, or interests
Part of your home address, including city/town, street, house/apartment number, or country
Your name or the name of a family member
Cybercriminals research their victims online, looking for clues that can help them hack their passwords. Even a wholly locked-down social profile displays information that could be used nefariously.
If any of your passwords use any information linked to you personally, it's time to update them to more secure versions.
2 Simple Tricks to Remember Strong Passwords
Struggling to keep track of strong passwords? You're not alone. Here are some practical tips to make it easier:
Use a phrase or sentence instead of a word: Pick a phrase you say often, or that is related to the site the password is used for.
Try making your password poetic: Think of a poem that you have memorized, or that is meaningful to you. Change a few letters for numbers and symbols, and it'll be a strong password.
Password managers: Contact your IT department to use the one approved by your organization. If it's good enough for your employer, it'll also work great for your personal passwords.
The fact that strong passwords are hard to remember shouldn't be a deterrent to using them. By applying the tips above, you can remain protected without having to wrack your brain every time.
Strong Passwords for Enhanced Cybersecurity
Assigning strong passwords for every account is the easiest and most effective way to protect your data at work and in your personal life. This practice ties into the larger concept of password hygiene, which creates a scalable password-creation process that remains safe over the years.
Cybercrime is rapidly evolving, and your security methods should follow suit. A strong password is far more than a string of characters–it is the first line of defense in data protection.
Access our password security training kit and learn how to create, manage, and maintain strong passwords that safeguard your information.