Don't take password security for granted

A recent survey reported by the BBC suggests that more than half of computer users never change their password, and many use words that can be easily guessed.

• 23% child's name

• 19% partner's name

• 12% birthdays

• 9% football team

• 9% celebrities and bands

• 9% favorite places

• 8% own name

• 8% pet's name

In my experience, the other common ones in North America include:

• - Mother's Maiden Name

• - Social Insurance Number or Social Security Number (SIN, SSN)*

• - Favorite Colour/Color

• - The person's name and the current year

*Before I go any further, I should stress that using ANY of those ideas as a password is an extremely bad security risk. Furthermore, the use of your SIN or SSN is particularly foolish as that can lead to identity theft. In the U.S. alone, this problem is estimated to be somewhere around 700,000 to 750,000 victims a year.

The problem with using such easy common names for passwords is that hackers, and identity thieves have special programs, much like dictionaries that go through all of the obvious common names, phrases and variations; they also go through the dictionary itself, including "foreign" language dictionaries. Sooner or later, they'll get a hit - and BINGO they're in and can do whatever it is that they want to do.

So what do we do?

• Don't use the same password for different sites. Especially
• your banking password(s).

• Don't store your passwords on your computer. Data on your
• computer is subject to remote theft. In addition you should
• protect yourself with a good firewall and anti-virus software.

• Don't write down your passwords on a sticky note and place it
• on your monitor, under your keyboard, mouse pad, etc...

• The best secure place for a password is in your head. However
• we all know that our heads are full of a lot of other info, and
• our non-sequential passwords may be difficult for us to
• remember... If you must write down a password - lock it up when
• it's not in use, or at the very least, stash it safely.

• Change your password frequently; particularly the really
• important ones.

• Use passwords that are at least eight digits long. If you're
• given a choice always opt for a long password as each digit makes
• it a longer and harder process of cracking.

• Do not share your passwords with anyone. If you have to share
• your password because a technician is working on your PC, or a
• web site techie is installing a script on your site or a designer
• is uploading some web pages to your site, then change the
• password(s) as soon as the work is done.

Conducting transactions on the web is safe. Doing business on the web is safe. Filling out forms on the web is also safe. As long as you exercise a bit of security consciousness on your part these activities are no more at risk than they are in the off-line world.

About the Author Pencil Dude is the publisher of the popular e-zine, Pencil Dude's !What's he picked this month? Click on over and take a look.