Picking the Right Password: Don’t Have a False Sense of Security

Choosing a password is tricky business. On the one hand, it has to be something that’s easy to remember. On the other hand, it can’t be obvious to everyone who knows you. If you’re not the only one using business computers, make sure that your employees realize the need for strong passwords when they are hired. After all, protecting your computer system requires cooperation from everyone on your team. One poorly chosen password can render the entire computer network susceptible to attack.

Below is a list of important tips to keep in mind when selecting a password:

• Change Your Password Frequently. For each computer and account you use, you should have a unique password. Therefore, if one password is cracked, the entire system will not be compromised. Also, don’t use your login name.
• Don’t Share Your Password. You should not write down your password or share it with anyone. If you need to write it down, store the paper in a secure location such as a locked file cabinet, not under your keyboard where anyone can find it.
• Be Unique. Do not use dictionary words, common names, and birthdays. Consider using a combination of letters, both uppercase and lowercase; numbers; and punctuation marks. Otherwise your system will be vulnerable to programs designed by hackers that can automate entry of every word in the dictionary.
• Be Careful. Reversing, capitalizing, or doubling a piece of easily identifiable personal information may sound like a clever plan, but it’s all too common. As a result, it won’t trip up anyone dead set on penetrating your computer system.
• Make It Long. Password lengths can vary, but the longer the better. Construct the password using a pattern so that you can remember it without having to write it down to jog your memory.

A well-designed computer system can prompt employees to follow these tips. During orientation, employees should be told to always change default passwords and initial access passwords. Also, consider talking to your system administrator about requiring strong passwords by automatically testing passwords opted by employees against certain criteria. Further, passwords can be set to expire after a certain length of time, requiring you and your employees to change them routinely.