Tuesday's Tip #72: Password Do's and Dont's and Password Managers

Passwords...

If you're like me - passwords are your nemesis. I have no less than 500 passwords. I mean seriously, I have a password to view my kids grades, a password to logon to my bank account, a password to unlock my phone, a password to watch Netflix, even a password for the app that controls my oven. Just thinking about it makes my head SPIN!! It literally never ends. And probably almost daily I'm adding something else to the list. Right? Without some type of system to keep track of your passwords, whether it's password manager, an excel spreadsheet or a notebook, there is no way to keep track of all your passwords much less keep them safe, secure and up to date.  

I've put together some password do's and don'ts. I have no doubt that some of these you have heard but I think some of them might be new to you. Like all good advice, sometimes we need to hear it again. (I'm speaking to myself too - some of these I'm in violation of too).

Password Do's

1. The Longer the Stronger.
   Many newer passwords allow you to create "pass phrases" which mean you can enter in a long phrase as a password.
   Myc@tLOVESToEatSalmonForBreakfast032578$#%&
   is an example of a password phrase. If it allows you to have a long password - you should definitely use all the characters possible.  Longer passwords are harder to crack.
   
   
2. Change them Often.
   This can be really hard to do but it's so important. Also - if you have any indication that you're password has been compromised, change it. If you've been notified the company you have an account with has had their information compromised, change your password. If you get hacked like happens on Facebook or other social media, change your password.
   
   
   
3. Dual Authentication.
   This isn't always an option but more and more this is becoming the norm. Dual authentication means that after logging in - you might get a notification via email or text you need to enter that provides an extra layer of security. If it's an option - always enable it.
   
   
4. Generate Random Passwords.
   Most Password Management software apps will generate a random password for you.
   
   
5. Different Passwords for Different Sites.
   I realize this is a big ask because it's so hard and it means you probably have hundreds of passwords - (this make a password manager a must). The reason this is important - is that if you have the same password for the same sites, if one gets compromised - all of your user names and passwords may be compromised. Especially in the case of identity theft. If someone gets your Facebook password - which is easier to hack and then goes to login to your bank account with the same information - now they have access to your money too.

Password Don'ts

1. Don't Make them Personal.
   Try not to use your kid's or pet's names, your birthdate or year, your address or year you graduated in your password. It makes them easy to guess and hack.
   
   
2. Don't Share them. 
   This goes without saying but don't share them with anyone. This also means don't write them on a post it and leave it somewhere to inadvertently share. Another way passwords sometimes get shared is by entering them in when logged on to a public wi-fi.
   
   
3. Don't use dictionary words.
   This might be new to you, but when you use words that can easily be searched in a dictionary - they are easier to crack by hackers. This is why it's better to create random passwords with a password generator and since you won't be able to remember them - you'll most likely be required to use some type of a password manager.

Password Managers

There are different options for keeping track of your passwords. A password manager doesn't have to be an app. A few main ones listed below.

Notebook. If you want to - you can buy a small notebook and keep the passwords in there - just be careful about where you store it.

Excel. If you don't want to use a password manager, you can create an Excel file and put a password on it. I did this for a long time. It's a perfectly good way to keep track of passwords. DO NOT forget the password though - because it's almost impossible to recover this password. Microsoft does a good job of encrypting their files which is what makes it a good place to store passwords.

LastPass. There are several free password managers. One list I reviewed is here. I use LastPass. There is a free personal version or you can also upgrade for some additional features to a paid version. But the free version does everything you need it to. I use the free version. 

A Few Advantages and Features of using LastPass or Other Password Manager Apps

• Can generates unique user names and passwords.
• Stores links, users names and passwords in a single location.
• Can be installed on your phone or within your browser to autofill as needed.
• You only need to memorize one password.
• Very Secure.