Let me in! 10 tips to better passwords

Let Me In! 10 Tips to Better Passwords Marian Merritt Norton Internet Safety AdvocateLet Me In! 10 Tips to Better Passwords 1

Why It Matters • Passwords protect your stuff • A good password stops a hacker in his/her tracks • A good password doesn’t make you crazy trying to remember it • A good password strategy = peace of mindLet Me In! 10 Tips to Better Passwords 2

Passwords in the News •Payment System – 130 million ! accounts E D •Gaming site 1 – 77 million K accounts A C •Social site – 30 million accounts •Military site - 26 millionH accounts •Career site – 6.4 million accounts •Dating site – 1.5 million accountsLet Me In! 10 Tips to Better Passwords 3

How the Hacker Uses Your Hacked Password• Published databases of usernames and passwords from major data breaches• They might already have the combination of your email address and favorite password• Plus dictionaries, common phrases• Keep running the list against the target siteLet Me In! 10 Tips to Better Passwords 4

What Are Some of The Most Popular Passwords? 12345 Abc123 Michael 123456 Monkey Football 1234567 Trustn01 Ashley 12345678 Dragon Bailey 123123 Baseball Shadow 111111 Iloveyou Letmein Password Master Blink182 Passw0rd Password1 Sunshine Admin1 Welcome Qazwsx Welcome1 SupermanLet Me In! 10 Tips to Better Passwords 5

1. Think Unique •Not guessable word or phrase •Different for each site and account •Some use a few complex passwords and then one “master” passwords for accounts considered unimportant •All accounts are important •Not password that anyone else would useLet Me In! 10 Tips to Better Passwords 6

2. No Dictionary Words• Avoid using full words you might find in a dictionary• Real words can be “edited” for password use – Dictionary becomes •D1(t10nAry (as an example)• But hackers are “on to” common letter replacement tricks like theseLet Me In! 10 Tips to Better Passwords 7

3. No Pet Names or School Mascots• Even if you went to “D1(t10nAry High School” – Avoid public information• Children often use their pet’s name – Friends and siblings hack accounts this way• Security Questions and Answers should be hard to guess – You can use “fake” answers to “mother’s maiden name” but you’ll need to remember what you used – Better are sites that let you create your own questionsLet Me In! 10 Tips to Better Passwords 8

4. Pay Particular Attention to Most Important Accounts• Email is most important – “Forgot your password” link on sites goes to email – Hacker with access to email can reset all other accounts• Nearly as important is social networking – Hacker can run scams against friends and colleagues• Financial sites and shopping sites with stored credit cards, tooLet Me In! 10 Tips to Better Passwords 9

5. Create a Pass Phrase and Turn It Into a Password •Select a multi word phrase that is meaningful to you (8 words or more) •Ex: “I want to go to Africa in 2013” – 8 words •Reduce to letters and numbers or characters •Ex: Iw2g2Ai2013 •Now you have complex password BUT (see next slide) Suitcase Create a mental Zebra picture of your 2013 phrase!Let Me In! 10 Tips to Better Passwords 10

6. Make Unique for Each Account• Iw2g2Ai2013 – complex but not unique• At each site, create a variation that you can remember – For example, add first letter of the site’s name: • The “N” in Norton.com + Iw2g2Ai2013 = NIw2g2Ai2013 – Or, add letter adjacent to the first letter of site’s name: • N becomes M (or B) • M+ Iw2g2Ai2013 = MIw2g2Ai2013 Now you have created a system of UNIQUE and COMPLEX passwords that you might be able to remember!Let Me In! 10 Tips to Better Passwords 11

7. Use a Password Manager to Make This Easy• Even with complex, unique password system, it’s work to remember them all• Password manager programs can secure all in encrypted file, protected by one master password• Makes life easier while managing complex and unique passwords• Allows sync to the cloud, making passwords portable• Example: Norton’s Identity Safe (included in Norton 360, Norton Internet Security or as free download) – https://identitysafe.norton.comLet Me In! 10 Tips to Better Passwords 12

8. Never Share or Show Passwords• Don’t write them down• Never email or text them to someone• If you tell it to someone, change the password as soon as possible• Legitimate companies NEVER ask for your account passwordLet Me In! 10 Tips to Better Passwords 13

9. If Notified About Data Breach, Take Action!• Access your online account and change the password• If a financial account, monitor transactions for unusual activity• If your social network, make sure the email addresses and contact information are yours and: – Review your privacy and security settings – Monitor your “news feed” for unusual activity – Monitor your friends list for people you don’t recognize – Review apps that you’ve signed up for and the data they can accessLet Me In! 10 Tips to Better Passwords 14

9. Install Security Software• Get a security product for all devices: – Computers – Mobile phones – Tablets• Prevent password-stealing malware from infecting your device• Alert you to dangerous websites or linksLet Me In! 10 Tips to Better Passwords 15

10. Secure Mobile Devices with a Password• Mobile apps may auto log you in to accounts• Protect access with a password on phone or tablet• Remove apps you don’t use anymore that may have credit cards or financial info store: – Shopping sites – Banking and Investment companies – Travel sitesLet Me In! 10 Tips to Better Passwords 16

Summary • Create unique passphrase (no dictionary words) • Nothing others will guess • Customize for each site • Focus on email, social, financial sites first • Use password managers • Never share or show passwords • Take action if breached • Use security software • Set passwords on mobilesLet Me In! 10 Tips to Better Passwords 17

What did I miss? Please send your suggestions to Marian@Norton.com Thank you! Marian Merritt Norton Internet Safety Advocate marian@norton.com @marianmerritt Copyright © 2012 Symantec Corporation. All rights reserved. Symantec and the Symantec Logo are trademarks or registered trademarks of Symantec Corporation or its affiliates in the U.S. and other countries. Other names may be trademarks of their respective owners. This document is provided for informational purposes only and is not intended as advertising. All warranties relating to the information in this document, either express or implied, are disclaimed to the maximum extent allowed by law. The information in this document is subject to change without notice.Let Me In! 10 Tips to Better Passwords 18

http://community.norton.com	1378
https://si0.twimg.com	11
https://twitter.com	9
http://translate.googleusercontent.com	2
http://131.253.14.66	2
https://twimg0-a.akamaihd.net	2
http://www.symantec.com	2
http://kred.com	1
http://norton.i.lithium.com	1
http://www.facebook.com	1

Let me in! 10 tips to better passwords

by Marian Merritt on Aug 24, 2012

Accessibility

Categories

Upload Details

Usage Rights

10 Embeds 1,409

Statistics

Let me in! 10 tips to better passwords Presentation Transcript