Synagex Celebrates World Password Day!
It’s World Password Day, which means it’s time to talk about one of the oldest pieces of cybersecurity advice around: use a strong password. Our own Leah is sharing some password advice in the video above. We’re adding a few tips of our own, along with some ways to make password security a little less... boring.
Simple enough, right? And yet somewhere out there, someone is still protecting their email, bank account, and half their digital life with Password123!.
First Things First: Longer Is Better
If your idea of a strong password is taking your usual password and adding an exclamation point, we have some news. 😬
Current NIST guidance puts much more emphasis on password length than complicated formulas requiring a specific combination of uppercase letters, numbers, and symbols. For a password used on its own, NIST recommends at least 15 characters.
One way to get there is with a passphrase: a longer combination of unrelated words that's easier for you to remember but difficult for someone else to guess.
Think less: Fluffy1!
And more: Something long, random, and uniquely yours.
Just don't use our examples as your actual password. That would make this a very unsuccessful cybersecurity blog.
Stop Reusing Passwords. Seriously.
We get IT. Remembering dozens of unique passwords sounds terrible.
But using the same password everywhere creates a much bigger problem. If that password is exposed in a breach, attackers can try the same credentials on your other accounts, a technique commonly called credential stuffing. NIST specifically recommends distinct passwords to help prevent this.
Think of password reuse like having one key that opens your house, car, office, safe, and everything else you own.
Convenient? Sure. Great if someone steals the key? Not so much.
Let a Password Manager Remember Them for You
So how are you supposed to remember a different long password for every account?
You aren't.
A reputable password manager can generate and securely store long, unique passwords so you don't have to keep them all in your head. NIST highly recommends password managers for accounts that still require passwords. That also means we can finally retire the sticky note under the keyboard.
And because your password-manager account holds the keys to the kingdom, protect it with a strong master passphrase and MFA.
Add MFA
A strong password is good. A strong password plus multifactor authentication? Better.
MFA adds another layer of verification so a stolen password alone may not be enough to access your account. NIST recommends setting up MFA and notes that passkeys can be an even stronger option where they're supported.
Synagex Password Hygiene Quick List:
Use long, unique passwords or passphrases.
Stop reusing passwords across accounts.
Use a password manager to generate and store them.
Turn on MFA wherever you can.
Replace passwords with passkeys when they're available and appropriate.
And most importantly, remember that cybersecurity doesn't have to be complicated to make a difference!
Happy World Password Day from all of us at Synagex Modern IT. Stay secure, folks, and as always, Keep IT Cool. 😎
Comments