May 6, 2021
Passwords, personal identification numbers (PINs), and passphrases. They've become part of our everyday lives. From using the ATM or debit card to checking your email, you enter secret letters, numbers, and characters all the time.
Keeping track of it all can be frustrating. Still, these protections are important because hackers represent a real threat to your information. A strong password remains the best way to keep your info safe, but it only works if it's complex and confidential.
You probably know that Password123 is not secure (though an astounding 20,000 people used that in 2020, according to password manager NordPass). Here are some more tips for creating a strong password to keep your accounts safe.
Avoid common mistakes
Most people use passwords that are based on personal information and are easy to remember. However, that also makes it easier for an attacker to crack them.
Consider a four-digit PIN. Is yours a combination of the month, day, or year of your birthday? Does it contain your address or phone number? Think about how easy it is to find someone's birthday or similar information.
What about your email password—is it a word that can be found in the dictionary? If so, it may be susceptible to dictionary attacks, which attempt to guess passwords based on common words or phrases.
Intentionally misspelling a word ("daytt" instead of "date") may offer some protection against dictionary attacks. But an even better method is to use a series of words and memory techniques, or mnemonics, to help you decode it. For example, instead of the password "hoops," use "IlTpbb" for "[I] [l]ike [T]o [p]lay [b]asket[b]all." Using both lowercase and capital letters adds another layer of obscurity.
Make it complex
According to the National Institute of Standards and Technology, you should consider using the longest password or passphrase permissible (8–64 characters) when you can. For example, "Pattern2baseball#4mYmiemale!" would be a strong password because it has 28 characters and includes the upper and lowercase letters, numbers, and special characters.
You may need to try different variations of a passphrase. For example, some applications limit the length of passwords, and some do not accept spaces or certain special characters. Avoid common phrases, famous quotes, and song lyrics.
Do this, not that
Once you've come up with a strong, memorable password, it's tempting to reuse it. DON'T!
Reusing a password, even a strong one, endangers your accounts just as much as using a weak password. If attackers guess your password, they would have access to your other accounts with the same password.
- Use the following techniques to develop unique passwords for each of your accounts:
- Use different passwords on different systems and accounts.
- Use the longest password or passphrase permissible by each password system.
- Develop mnemonics to remember complex passwords.
- Consider using a password manager program to keep track of your passwords. (See more information below.)
- Do not use passwords that are based on personal information that can be easily accessed or guessed.
- Do not use words that can be found in any dictionary of any language.
Protect your passwords
After choosing a password that's easy to remember but difficult for others to guess, don't write it down and leave it someplace where others can find it. Writing it down and leaving it on your desk, next to your computer, or, worse, taped to your computer makes it easily accessible for someone in your office.
Do not tell anyone your passwords, and watch for attackers trying to trick you through phone calls or email messages requesting that you reveal your passwords.
Programs called password managers offer the option to create randomly generated passwords for all of your accounts. You then access those strong passwords with a master password. If you use a password manager, remember to use a strong master password.
Password problems can stem from your web browsers' ability to save passwords and your online sessions in memory. Depending on your web browsers' settings, anyone with access to your computer may be able to discover all of your passwords and gain access to your information. Always remember to log out when you are using a public computer (at the library, school, or even a shared computer at your office). Avoid using public computers and public Wi-Fi to access sensitive accounts such as banking and email.
There's no guarantee that these techniques will prevent an attacker from learning your password, but they will make it more difficult.
Stay Safe with La Cap
As a reminder, La Cap will NEVER ask for your online banking credentials, debit/credit card information or passwords. If you ever receive a call from someone claiming to be with La Cap who is asking for your personal information, hang up.
Check out our Fraud Prevention Resources for more tips to help keep you safe!