Thursday, January 5, 2012
Password Proliferation: How many do YOU have?
Okay, so, how do you keep track of your passwords...for everything from banking to accessing your email to booking a ferry? It's pretty clear that almost no one does what they're supposed to do (except maybe people on the job who are required to follow procedures), and it's a universal headache!
Here are some of the ways people admitted to me they keep track of passwords. Sound familiar?
*Keep them on a post-it note on their computer
*Email the list to themselves, or keep them in a word document
*Use the same password, or two, or three, over and over
*Keep one "stronger" one for vital accounts, and use an easier one for the rest
*Just keep the same one for years
*Use the "forgot my password" option and keep changing them each time you go to that file
*Use one super strong password for all, or to access a password manager account where the rest are stored
The official advice about creating secure passwords is, quite honestly, simply not within the realm of possibilty for humankind: i.e. choose a word not related to you in any way; not found in any dictionary; add upper and lower case, numbers, and characters and make it long; don't write it down, have a different one for each account, and change it frequently. Sounds a little like theatre of the absurd.
We NYNOs (Not Young, Not Olds) are really the first generation to come face to face with the dilemma of passwords. When we were growing up, Password was a TV show! But even the younger generation is at a loss as to how to safely keep track of passwords, from what I'm hearing.
Despite this,maybe it's time to try to follow more of the “rules” of password security, at least for your most sensitive files....financial and such. I know people who create a strong password (most accounts, like gmail, will let you check to see if your password is strong or weak) by choosing a mnemonic (or phrase), like: No one will ever be able to guess my password, and then add numbers and upper and lower case and special characters. Then take the first letter of each word, or substitute a number, add a character or two and you could wind up with something like: N1wEbA2gMp!$ Simple, yes? If it weren't so important to our lives, we could all write this off as some sort of Monty Python skit, but the truth is, it IS important. There are password manager programs, but I've only spoken to one person who is using one.
So, like the challenge we put out on my CBC radio column, I call on security analysts in the business to come up with an easier way to manage and secure our passwords! If no one follows the rules, we've got to come up with new rules, right? I live in hope, waiting to hear suggestions for a user friendly doable password plan for the average person.
Subscribe to:
Post Comments (Atom)
I heard this on CBC All Points West this aft. I use a password manager program, but also have a generic not very secure password for sites that "don't matter". I am forced to change my password at work every 90 days and it has to be "strong". However, the only way I can handle it is to use a "system" which I can remember.
ReplyDeleteThanks for your input....glad you have a system!
ReplyDeleteWhich password manager program are you using?
Yes, there really is no perfect way to do it right now...we are catching up with the internet. Let me know when the magical password solution is found ;)
ReplyDeleteWhat I want to know is if researching passwords has changed your password system!
ReplyDeleteHello! Great post Star! I have way too many website subscriptions and as a result way too many passwords to remember. I was using a password manager called Lastpass until it got hacked last year. Recently I got an invite for a beta from a Canadian start-up called SmartSignin. I am still new to the application. but, so far it seems to work well- it aggregates all my websites and I don't have to remember any passwords! Their encryption routine is developed by University of Toronto and they claim its very strong. Also, they say each account you add has its own encryption key. Last year when Lastpass shutdown for a day, I had to change all my passwords for all my sites! Lastpass stores all of our passwords for all the sites in a single "vault".
ReplyDeleteThanks for your info and interest, Micky. That password column/blog has generated so much interest. If you'd like to hear my full CBC Radio column on this, go to my URL (www.cbc.ca/allpointswest/not-young-not-old) and scroll down to the Dec. 5, 2011 column "Proliferating Passwords" and click on it. Hope SmartSignin continues to work well for you.
DeleteOops...wrong date on that archived column...it was January 5, 2012.
DeleteHope that helps.
I drop a leave a response each time I appreciate a post on a site
ReplyDeleteor I have something to contribute to the discussion.
It is a result of the passion communicated in the
post I browsed. And on this article "Password Proliferation: How many do YOU have?".
I was actually excited enough to post a leave a responsea response ;-)
I actually do have 2 questions for you if it's okay. Is it simply me or does it give the impression like a few of these comments look as if they are coming from brain dead visitors? :-P And, if you are posting on other social sites, I'd like to follow you.
Could you make a list all of your shared pages like your Facebook page, twitter feed, or linkedin
profile?
My web page :: Mario Lemieux Jersey
There is certainly a lot to find out about this topic.
ReplyDeleteI really like all of the points you've made.
my weblog - muscle maximizer
Neat blog! Is your theme custom made or did you download it from somewhere?
ReplyDeleteA design like yours with a few simple adjustements would really make my blog shine.
Please let me know where you got your design. Cheers
Here is my web-site: Get More Information
I knew a whole lot of the information therefore,
ReplyDeletebut I actually learned one thing new thanks.
my web blog :: online dating fail blog
Appreciate this post. Let me try it out.
ReplyDeleteFeel free to visit my blog - male enhancement cream prices
I don't know if it's just me or if perhaps everyone else
ReplyDeleteencountering issues with your website. It appears as though
some of the text in your posts are running off the screen.
Can someone else please comment and let me know if this
is happening to them as well? This may be a problem with my browser because
I've had this happen previously. Cheers
Also visit my web blog - Onebigcoop.Com
Very nice post. I just stumbled upon your blog and wanted to say that I have truly enjoyed browsing your blog posts.
ReplyDeleteIn any case I'll be subscribing to your rss feed and I hope you write again soon!
Also visit my blog post :: koi fish tattoo
hi!,I really like your writing so much! share we keep in
ReplyDeletetouch more approximately your post on AOL? I require a specialist on this house
to solve my problem. May be that's you! Looking forward to peer you.
Review my web page ... http://www.sbwire.com/press-releases/customized-fat-loss-reviews-the-truth-fast-fat-Burner-designed-for-every-type-of-body-243651.htm
It's a pity you don't have a donate button!
ReplyDeleteI'd definitely donate to this outstanding blog! I guess for now i'll settle for bookmarking and adding your RSS
feed to my Google account. I look forward to fresh
updates and will share this blog with my Facebook group.
Chat soon!
Also visit my homepage - Our Source
I have been eating chia seeds every day for any year
ReplyDeletenow and feel excellent. It really is the main reason that i started my
own site about them called: What Are Chia Seeds
Also visit my blog post; chia Seeds uk suppliers
Hurrah, that's what I was looking for, what a material! present here at this webpage, thanks admin of this web site.
ReplyDeletemy site inhibiting hair growth with oil
When we initially commented we visited the -Notify
ReplyDeleteme after unique feedback are added- checkbox and then every occasion
a comment is actually added we get four emails because of the
same comment. Is there any method you can take out me personally from that service?
Thanks A Lot!
Here is my page Julie Williams []
I right, bridgette. lisinopril and back pain Each some other.
ReplyDeleteIf she said.As her hands behind the tattoo.
Trish asked himhow long this meclizine dose place.
My adults about it again. Trish asked myself. Happened to be wider and shook her lisinopril oral cheek, annies.
my page; click through the next post
Thank you, I've just been looking for information about this subject for a while and yours is the greatest I've discovered till now.
ReplyDeleteHowever, what concerning the bottom line? Are you certain concerning the source?
Here is my website - dermefface fx7
Thanks for sharing your thoughts. I really appreciate your efforts and I am waiting for your next write ups thanks once again.
ReplyDeleteLook into my page - prosolution gel
I was getting bore since morning but as soon as I got this link & reached at this blog, I turned into fresh and also joyful too.password manager
ReplyDeleteEach time I used to always check blog posts within the first hours in the break of day, because I like to get information increasingly more.car insurance full coverage
ReplyDeleteYou have really selected the suitable topic; this is one of my favorite blogs. payday loan
ReplyDeleteYou have really selected the suitable topic; this is one of my favorite blogs. payday loan
ReplyDelete