Password Security 101
Use Unique Passwords
Why Use Different Passwords?
While remembering just one or two passwords is much easier than remembering many, never use the same password to access different computer systems. This is especially true for accessing various websites on the Internet. You cannot be sure your password is well-protected -- or even encrypted -- on any system you do not own. When a password in compromised, damage is minimal if the password is unique.
The problem we all share, of course, password management of many passwords. The best solution is to use your own secret method of creating passwords, which allows you to determine any of your passwords without writing them down. For example, you could combine the first letters of a common phrase with some elements of each host system to determine the password.
These passwords obviously are not as good as the randomly generated variety, but at least you don't have to write them down. Use your imagination: the more cryptic-looking, the better. The important thing is to use some method easy for you -- but hard for anyone else -- to reproduce. A good time to alter your method is whenever you are forced to change one password. Take the time change them all using your new method.
Another increasingly common way to manage multiple passwords is by using password management software. (This capability is even built-in to many popular applications such as the Firefox browser). Password managers have a few problems you should be aware of:
- You must use a strong master password to lock your password database! The security of all your stored passwords is only as good as the master password. If this password falls victim to an exploit, all of your passwords fall with it.
- Your password database remains in a fixed location. If you have a laptop, this may not be a big problem -- not until your laptop is stolen, that is. Another possible solution is to use portable storage -- a USB drive, for example -- for your password database. Again, physical loss is a huge risk; you must maintain a database which is locked with a strong password and backed up elsewhere. (You will need a copy of the database to change all your passwords as soon as possible!)
- Make sure the software is well designed and uses strong encryption to store the password database.
Password Tips
Use Strong Passwords
Longer Passwords Enhance Computer Security
How Passwords are Stored
Use Different Passwords
Passwords in Email
Two Factor Authentication
NT Password Length -- The LM Hash Factor
Link to this page
Knowledge is power. The Bitmill Inc. encourages links to our site. While your links to our site are much appreciated, please note that reciprocal links will be considered subject to relevance and quality. To link to this page, please cut and paste the following HTML code into your web page source file.
Thank you for your interest and support.
