7 tips for secure passwords and accounts - SecureSafe

2023-05-04
-
Author:
Jan Tissler
In keeping with Data Privacy Day, we have some good tips for secure passwords.

How many new passwords do you think you've created in your life? And how many times have you entered one to log in to a service or device? Countless times. It's so commonplace that we can't possibly answer these questions.

At the same time, passwords are in many cases the central security factor between valuable data and an attacker. It is therefore all the more important that they are well chosen.

What makes passwords insecure and vulnerable to attack

A major disadvantage of the password principle is that they must be stored with the provider - hopefully in a sufficiently encrypted form. However, mistakes happen and not everyone can afford such a high security standard as we have at DSwiss. And so unsecured or insufficiently protected passwords regularly fall into the wrong hands. The Identity Leak Checker page, for example, looks to see if your email address can be found in lists that hackers have published.

But even if the passwords are stored securely, they can still be stolen with the appropriate additional effort, for example through social engineering or phishing. Neither the best encryption nor the perfectly chosen password are of any use if the access data is given out voluntarily. The same applies if malware intercepts all keystrokes, including the bank account login.

At the same time, it turns out time and again that many users do not use secure passwords despite years of education. "123456" regularly turns up in data leaks. Or, although a secure password is used, it is used more than once out of convenience. The problem is that if it is leaked to the public by just one hack, all other accesses with the same password are also at risk.

7 tips for secure passwords and accounts

  1. The longer the password, the better. This makes it more difficult for attack methods that want to guess the password automatically. Every additional digit is valuable.
  2. Choose a separate password for each platform. If a password is cracked, only one login is affected.
  3. Do not use words that can be found in the dictionary. Hackers go through them automatically at lightning speed. For manual typing, it is helpful if you string any syllables together. This is easier to type.
  4. Special characters, numbers and upper and lower case letters are a good idea. This also makes it more difficult for the machine to guess the password, because the number of possible combinations of characters increases.
  5. Use two-factor authentication.
  6. Give incorrect or complex answers to "security questions" that really only you could know. Of course, you must still be able to remember them. But if you give answers here that can be easily guessed by others or found on the net, the security is zero.
  7. As a substitute e-mail address for the "Forgot password" function, use one that you set up only for this purpose and that is not known anywhere else.

Closing words

At the heart of password security are rules 1 and 2: use long passwords and each only 1x. Therefore, we recommend the use of a password manager. It can not only suggest secure passwords, but also save them conveniently and securely. This way you will not be tempted to use simple passwords or even to reuse them. We offer such a password manager in SecureSafe.