There’s a lot of talk about cyber security and all the recent data breaches. Big headlines but you know what’s missing? Some basic advice for small businesses about how to keep their IT systems secure.
In this post, I’m going to tell you the three simple steps you should implement today to create a secure password for yourself and something you can share with your colleagues. As an added bonus – you’ll learn the password security method that makes things simple so you are not having to remember multiple passwords or create a new password every other week.
Step 1:
Think passphrase instead of a password. A passphrase is a series of words instead of a traditional password. Here’s an example of a passphrase
“AberdeenFCAreTheBestTeamInScotland”
This is much easier to remember than something like “7gBVY?0n@” and guess what it’s more secure. The reason for this is due to the length of the password. A lot of hackers out their use brute force methods of attacking. In this method, they run software to guess the password however the longer the password, the more time it takes to imagine. Having a passphrase with multiple words combined takes years to crack instead of a few hours.
Step 2:
You’ve probably been told to change your password on a regular basis. This is often preached as good practice but research has shown that this is not the case. The reason for this is due to users just changing part of the password when asked on a regular basis that they must change it. This often turns out to be changing the last few characters or incrementing a number at the end. I was guilty myself of this method until the logic was explained to me.
The other reason frequent password changes should be avoided is you tend to forget new passwords sooner and that leads to users writing down their password on a post-it note or similar. It totally defeats the purpose of what you’re trying to achieve! Thus, a best practice is to ask employees for password change only in case of potential threat or compromise.
Click here to find out what step 3 is on our website, Aberdeen Cyber Security
Comments