Welcome to Product Support, a column devoted to helping you get the most out of the stuff you already use.
Bill Gates predicted the death of passwords in 2004, and while biometrics are more common than ever, passwords have yet to go the way of the dinosaur. At the same time, never ending data breaches are releasing passwords into the wild every day and hackers armed with with databases full of leaked credentials are on the prowl to ruin your day or week or life.
Read More
“We’ve grown accustomed to the speed and convenience of the digital age, which means we don’t have our guard up as much in terms of protecting our personal information,” says Ryan Merchant, senior manager at Dashlane. “Yet, when we download apps, make purchases, and sign up for services online, most of us willingly give all of [our personal] information away without learning more about how it will be used.” To stay safe in this digital age, we’ve asked Merchant and Jeffrey Goldberg, the Chief Defender Against the Dark Arts (a.k.a. head of security) at AgileBits, the company that owns 1Password, for some helpful tips.
Long passwords are better than complex.
There was a brief time when requiring symbols and digits did make passwords stronger, Goldberg said, but today passwords with digits or symbols aren’t inherently more secure. There is still value in adding symbols and digits, but length is much more important. A strong password is at least between 16-20 characters — so too long to probably memorize. A really strong password is over 30 characters. Goldberg recommends using an automated password generator to create passwords.
Don’t make your password a phrase or ordinary word.
“Your password should never have names, words, dates, sequential numbers, or any combination of characters that someone can guess,” Merchant advised. “It has to be random to be strong.” He does suggest using a combination of letters, numbers and symbols, and always include a mix of upper and lower-case letters.
Have a separate password for every account.
“Password reuse is a bigger problem than weak passwords,” said Goldberg. “It’s by far more important to have different passwords than to worry too much about the strength of the one password that you’re using in lots of places.” Even if it’s a very strong password, if used in numerous places, it is likely that at least one of those places isn’t treating your password securely. And once one password is discovered, then hackers are likely to try it out on every other site and service you use.
