Thursday, January 5, 2012

Password Proliferation: How many do YOU have?


Okay, so, how do you keep track of your passwords...for everything from banking to accessing your email to booking a ferry? It's pretty clear that almost no one does what they're supposed to do (except maybe people on the job who are required to follow procedures), and it's a universal headache!
Here are some of the ways people admitted to me they keep track of passwords. Sound familiar?
*Keep them on a post-it note on their computer
*Email the list to themselves, or keep them in a word document
*Use the same password, or two, or three, over and over
*Keep one "stronger" one for vital accounts, and use an easier one for the rest
*Just keep the same one for years
*Use the "forgot my password" option and keep changing them each time you go to that file
*Use one super strong password for all, or to access a password manager account where the rest are stored

The official advice about creating secure passwords is, quite honestly, simply not within the realm of possibilty for humankind: i.e. choose a word not related to you in any way; not found in any dictionary; add upper and lower case, numbers, and characters and make it long; don't write it down, have a different one for each account, and change it frequently. Sounds a little like theatre of the absurd.

We NYNOs (Not Young, Not Olds) are really the first generation to come face to face with the dilemma of passwords. When we were growing up, Password was a TV show! But even the younger generation is at a loss as to how to safely keep track of passwords, from what I'm hearing.

Despite this,maybe it's time to try to follow more of the “rules” of password security, at least for your most sensitive files....financial and such. I know people who create a strong password (most accounts, like gmail, will let you check to see if your password is strong or weak) by choosing a mnemonic (or phrase), like: No one will ever be able to guess my password, and then add numbers and upper and lower case and special characters. Then take the first letter of each word, or substitute a number, add a character or two and you could wind up with something like: N1wEbA2gMp!$ Simple, yes? If it weren't so important to our lives, we could all write this off as some sort of Monty Python skit, but the truth is, it IS important. There are password manager programs, but I've only spoken to one person who is using one.

So, like the challenge we put out on my CBC radio column, I call on security analysts in the business to come up with an easier way to manage and secure our passwords! If no one follows the rules, we've got to come up with new rules, right? I live in hope, waiting to hear suggestions for a user friendly doable password plan for the average person.

26 comments:

  1. I heard this on CBC All Points West this aft. I use a password manager program, but also have a generic not very secure password for sites that "don't matter". I am forced to change my password at work every 90 days and it has to be "strong". However, the only way I can handle it is to use a "system" which I can remember.

    ReplyDelete
  2. Thanks for your input....glad you have a system!
    Which password manager program are you using?

    ReplyDelete
  3. Yes, there really is no perfect way to do it right now...we are catching up with the internet. Let me know when the magical password solution is found ;)

    ReplyDelete
  4. What I want to know is if researching passwords has changed your password system!

    ReplyDelete
  5. Hello! Great post Star! I have way too many website subscriptions and as a result way too many passwords to remember. I was using a password manager called Lastpass until it got hacked last year. Recently I got an invite for a beta from a Canadian start-up called SmartSignin. I am still new to the application. but, so far it seems to work well- it aggregates all my websites and I don't have to remember any passwords! Their encryption routine is developed by University of Toronto and they claim its very strong. Also, they say each account you add has its own encryption key. Last year when Lastpass shutdown for a day, I had to change all my passwords for all my sites! Lastpass stores all of our passwords for all the sites in a single "vault".

    ReplyDelete
    Replies
    1. Thanks for your info and interest, Micky. That password column/blog has generated so much interest. If you'd like to hear my full CBC Radio column on this, go to my URL (www.cbc.ca/allpointswest/not-young-not-old) and scroll down to the Dec. 5, 2011 column "Proliferating Passwords" and click on it. Hope SmartSignin continues to work well for you.

      Delete
    2. Oops...wrong date on that archived column...it was January 5, 2012.
      Hope that helps.

      Delete
  6. I drop a leave a response each time I appreciate a post on a site
    or I have something to contribute to the discussion.
    It is a result of the passion communicated in the
    post I browsed. And on this article "Password Proliferation: How many do YOU have?".
    I was actually excited enough to post a leave a responsea response ;-)
    I actually do have 2 questions for you if it's okay. Is it simply me or does it give the impression like a few of these comments look as if they are coming from brain dead visitors? :-P And, if you are posting on other social sites, I'd like to follow you.
    Could you make a list all of your shared pages like your Facebook page, twitter feed, or linkedin
    profile?

    My web page :: Mario Lemieux Jersey

    ReplyDelete
  7. There is certainly a lot to find out about this topic.
    I really like all of the points you've made.

    my weblog - muscle maximizer

    ReplyDelete
  8. Neat blog! Is your theme custom made or did you download it from somewhere?

    A design like yours with a few simple adjustements would really make my blog shine.
    Please let me know where you got your design. Cheers

    Here is my web-site: Get More Information

    ReplyDelete
  9. I knew a whole lot of the information therefore,
    but I actually learned one thing new thanks.

    my web blog :: online dating fail blog

    ReplyDelete
  10. Appreciate this post. Let me try it out.

    Feel free to visit my blog - male enhancement cream prices

    ReplyDelete
  11. I don't know if it's just me or if perhaps everyone else
    encountering issues with your website. It appears as though
    some of the text in your posts are running off the screen.
    Can someone else please comment and let me know if this
    is happening to them as well? This may be a problem with my browser because
    I've had this happen previously. Cheers

    Also visit my web blog - Onebigcoop.Com

    ReplyDelete
  12. Very nice post. I just stumbled upon your blog and wanted to say that I have truly enjoyed browsing your blog posts.
    In any case I'll be subscribing to your rss feed and I hope you write again soon!

    Also visit my blog post :: koi fish tattoo

    ReplyDelete
  13. hi!,I really like your writing so much! share we keep in
    touch more approximately your post on AOL? I require a specialist on this house
    to solve my problem. May be that's you! Looking forward to peer you.

    Review my web page ... http://www.sbwire.com/press-releases/customized-fat-loss-reviews-the-truth-fast-fat-Burner-designed-for-every-type-of-body-243651.htm

    ReplyDelete
  14. It's a pity you don't have a donate button!

    I'd definitely donate to this outstanding blog! I guess for now i'll settle for bookmarking and adding your RSS
    feed to my Google account. I look forward to fresh
    updates and will share this blog with my Facebook group.
    Chat soon!

    Also visit my homepage - Our Source

    ReplyDelete
  15. I have been eating chia seeds every day for any year
    now and feel excellent. It really is the main reason that i started my
    own site about them called: What Are Chia Seeds

    Also visit my blog post; chia Seeds uk suppliers

    ReplyDelete
  16. Hurrah, that's what I was looking for, what a material! present here at this webpage, thanks admin of this web site.

    my site inhibiting hair growth with oil

    ReplyDelete
  17. When we initially commented we visited the -Notify
    me after unique feedback are added- checkbox and then every occasion
    a comment is actually added we get four emails because of the
    same comment. Is there any method you can take out me personally from that service?
    Thanks A Lot!

    Here is my page Julie Williams []

    ReplyDelete
  18. I right, bridgette. lisinopril and back pain Each some other.
    If she said.As her hands behind the tattoo.
    Trish asked himhow long this meclizine dose place.
    My adults about it again. Trish asked myself. Happened to be wider and shook her lisinopril oral cheek, annies.


    my page; click through the next post

    ReplyDelete
  19. Thank you, I've just been looking for information about this subject for a while and yours is the greatest I've discovered till now.

    However, what concerning the bottom line? Are you certain concerning the source?


    Here is my website - dermefface fx7

    ReplyDelete
  20. Thanks for sharing your thoughts. I really appreciate your efforts and I am waiting for your next write ups thanks once again.


    Look into my page - prosolution gel

    ReplyDelete
  21. I was getting bore since morning but as soon as I got this link & reached at this blog, I turned into fresh and also joyful too.password manager

    ReplyDelete
  22. Each time I used to always check blog posts within the first hours in the break of day, because I like to get information increasingly more.car insurance full coverage

    ReplyDelete
  23. You have really selected the suitable topic; this is one of my favorite blogs. payday loan

    ReplyDelete
  24. You have really selected the suitable topic; this is one of my favorite blogs. payday loan

    ReplyDelete