Tips on Setting IT Security Passwords

Strong Simple Security

It sounds like an oxymoron, doesn’t it? How can security be strong but simple?

Let’s look at the basics - your passwords. These are the keys to your doors and thanks to the proliferation of the internet into all aspects of our lives, we each have a lot of doors to open.

Now how many of you are guilty of re-using the same password over and over? People often say to me that they simply can’t remember the plethora of passwords that modern living dictates we carry with us, but that’s like having one key to unlock your home, you garage, your car, your locker etc. – not only do you have a key for each lock, I don’t even keep my keys in the same bunch. I have my office keys, car keys and home keys all separated, because you only have to experience the dread of losing all your keys once to find a better way of working. So when I received the email from LinkedIn last week telling me I was one of the unlucky 6.5 million whose password had been leaked to the internet, I wasn’t overly perturbed. Don’t get me wrong, any potential leak of personal information shouldn’t be taken lightly, but in this case there is nothing on my LinkedIn that isn’t public anyway and more importantly, I don’t keep the same password for any two systems.

As much as I’d like to claim having an eidetic memory, I can maintain strong, unique passwords for all my logons because I have a system to generate the password based on the logon itself. It’s easy as long as you follow a few rules. A good system should:
• Generate long passwords – 10 characters plus (as Mercedes Benz would say “there’s no replacement for displacement”)
• Not contain common dictionary words
• Not contain anything personal to yourself i.e. your birthday/maiden name/first pet
• Use symbols

Read More at - http://www.agile-it.net/monday-musings-015/