{"id":49449,"date":"2017-10-28T07:36:03","date_gmt":"2017-10-28T07:36:03","guid":{"rendered":"https:\/\/www.biphoo.com\/bipnews\/?p=49449"},"modified":"2017-10-28T07:36:03","modified_gmt":"2017-10-28T07:36:03","slug":"7-steps-for-crafting-the-perfect-password","status":"publish","type":"post","link":"https:\/\/www.biphoo.com\/bipnews\/technology\/security\/7-steps-for-crafting-the-perfect-password.html","title":{"rendered":"7 steps for crafting the perfect password"},"content":{"rendered":"

7 steps for crafting the perfect password<\/span><\/strong><\/span><\/h2>\n

7 steps for crafting the perfect password:- Your password can ruin your life. I know that sounds dramatic, but it\u2019s true. If someone figures out the password to your email, you\u2019re in trouble. Social media? Even worse. Once hackers access your online bank account, they can wreck your finances, and you may feel the repercussions of that break-in for years.<\/span><\/p>\n

It seems not a week goes by that we don\u2019t hear about another data breach. How do you know if the hackers have your info? Find out whether your email has been hacked or stolen.<\/span><\/p>\n

Most of us have the wrong idea about passwords. We think they have to be convoluted messes, like F$%Th5l2K!&. This theory reigned for years\u2014that passwords should be nonsensical and hard to remember.<\/span><\/p>\n

It started in 2003 with guidelines from the National Institute of Standards and Technology (NIST), which insisted on random combinations of numbers, letters, and symbols. The organization\u2019s manager, Bill Burr, spread this gospel for years. But in a recent interview with the Wall Street Journal, he admitted that this wasn\u2019t nearly as effective as he\u2019d thought.<\/span><\/p>\n

Thanks to a new round of research, cyber-security experts have changed their tune. Yes, you should still avoid guessable passwords like \u201cp@ssword1\u201d or \u201cletmein.\u201d But a strong password also can be logical, fluid and easy to remember.<\/span><\/p>\n

1. Passwords should withstand 100 guesses<\/span><\/strong><\/span><\/p>\n

This is the most important part: No matter what your password is, it should withstand 100 guesses, which means it shouldn\u2019t be tied to any public information about you or your family.<\/span><\/p>\n

Hackers often turn to your social media profiles to find information about you, and a little data goes a long way, such as your birthday and the name of your pet. Experts believe that criminals can guess the average person’s password nearly 73% of the time, and they can often access other accounts by using slight variations on the same password.<\/span><\/p>\n

Facebook is all about making it easy to share your life with your friends and family. Unfortunately, there are some things you shouldn’t share online. These bits of information can put you in danger of identity theft, losing your job or causing other major headaches. Here are five of the biggest offenders you should not put on your profile.<\/span><\/p>\n

2. Use a phrase<\/span><\/strong><\/span><\/p>\n

Instead of thinking of your password as a secret code, think of it as a \u201cpassphrase.\u201d These are strings of words that are both easy to memorize but hard for anyone else to crack.<\/span><\/p>\n

Suppose you wanted to be an astronaut when you were a kid, and your favorite color is fuschia. You have never mentioned these facts online, and only your Mom knows such trivia about you. You could compose a passphrase like \u201cilikefuschiaastronauts.\u201d You\u2019ll never forget it, and the passphrase will confound hackers for (literally) centuries.<\/span><\/p>\n

I actually recommended and told how to create a great passphrase a little over a year ago. The advice is still valid. Go here to come up with your own.<\/span><\/p>\n

3. Go long<\/span><\/strong><\/span><\/p>\n

You might want to sit down for this one: The new NIST guidelines suggest allowing users to create passwords up to 64 characters in length. As if that isn\u2019t weird enough, the guidelines also allow spaces between words. While many people just try to meet the bare minimum requirement of using eight characters, you will get a much stronger password by stretching things out.<\/span><\/p>\n

You could theoretically create a complex list or sentence, which still makes perfect sense to you. You could list all your pets\u2019 names from childhood, like \u201cfluffy princess rex spike booboo chewie,\u201d or all the streets on the way to your favorite restaurant, like \u201cacademy main washington ohio central.\u201d Easy to remember. Hard to crack.<\/span><\/p>\n

4. Don\u2019t change your password until you have to<\/span><\/strong><\/span><\/p>\n

Until recently, consumers were advised to change their passwords every three months. But as NIST\u2019s Paul Grassi recently told the Institute of Electrical and Electronics Engineers, \u201cExpiration isn\u2019t a motivator to create a brand new password, it\u2019s motivation to shift one character so you can remember the password.\u201d<\/span><\/p>\n

If you\u2019ve created a strong password, then don\u2019t worry about changing it out all the time. Just stick with it unless you\u2019ve been notified of a security breach that requires a password reset.<\/span><\/p>\n

5. Choose something memorable<\/span><\/strong><\/span><\/p>\n

Remember, each password should be unique, but they don\u2019t have to be cumbersome. The NIST calls passwords \u201cmemorized secrets.\u201d You want to avoid the temptation to write down passwords, so pick a password that has enough meaning to you to stay in your mind.<\/span><\/p>\n

I\u2019m not a big fan of password managers. I commit my passwords to memory. But if you cannot do that, here\u2019s a free program that will help you store your passwords safely and easily.<\/span><\/p>\n

6. Get creative with characters<\/span><\/strong><\/span><\/p>\n

It may take websites some time to catch up to the latest NIST guidelines, but you can still create a memorable password that meets current restrictions. Go back to Burr\u2019s advice on passphrases. You might choose something like \u201cArizonaCardinalsfootballisnumber1!\u201d or \u201cIgivemyjob1000%everyday.\u201d Those meet the requirements of having at least eight characters, a special character, and upper and lowercase letters.<\/span><\/p>\n

7. Use two-factor identification<\/span><\/strong><\/span><\/p>\n

While passwords help protect your information, cyber-criminals are more sophisticated than ever. If they break into your accounts, you may not recognize the damage until it\u2019s too late.<\/span><\/p>\n

Months passed before the public learned about the Equifax breach, and it\u2019s hard to assess how much information has been leaked, nor how it will be used. If you haven\u2019t checked to see if your personal details are in the hands of cyber crooks, do it now.<\/span><\/p>\n

That\u2019s why two-factor identification is so important. Using text-messages, emails or special apps, an account-holder will receive a notification every time a password is changed, entered on a new device, or at a new location. You will have to verify that it\u2019s you attempting to gain access.<\/span><\/p>\n

Source:-\u00a0https:\/\/www.usatoday.com\/story\/tech\/columnist\/komando\/2017\/10\/27\/7-steps-crafting-perfect-password\/806890001\/<\/span><\/p>\n

\n\t\t\t
\n\t\t\t <\/div><\/div>\n\t\t