Sunday, June 10, 2007

Passwords and Security

When I first started doing technical support everybody would give me their password. I knew probably half of the passwords of all the directors at the hospital where I worked. Knowing the passwords made it easier to help them. Those were the good old days. Nowadays, it's completely inappropriate to ask a user their password as it violates all kinds of security policies.

Also, most people create the stupidest passwords in the world. For Example:
  • Their name with a number after it
  • Their kids name with a number after it
  • Their address
  • Employee ID Number
  • Spouses Name
  • etc.
A couple of weeks ago I went through a major freak-out because I realized a couple of things about my password:
  • In the past I have given it out to people
  • I hadn't changed it in quite a long time
  • It's the same for almost EVERYTHING

So, I reset my password and used all kinds of characters etc so that nobody would be able to crack it. This was a monumental task. How many accounts do I have anyway? TONS! So, I hereby advise others to change their passwords periodically and to make sure their password is strong. Check out the following sites if you need help:

http://www.microsoft.com/protect/yourself/password/create.mspx (How to create strong password)

http://www.microsoft.com/protect/yourself/password/checker.mspx (Test strength of your passwords)

7 comments:

Anonymous said...

Oh my. I am concerned. I have never heard that about "password strength" or that I should be worried about security. I have all of my passwords on a post it note on my computer. I also use a sharpie and write them on the back of my bank cards.

I dont even have to tell you what the post it notes say because you read my mind with what people typically use. Except for that one that uses my high school mascot.

Queen B said...

Yeah, I've been having some freak out lately that mine aren't different enough. Of course, if I had different passwords for everything, there is no way I'd ever be able to remember them. Then, even I wouldn't be able to log into everything, so how secure would that be? :)

As a side note, I have a great idea on this. Where do you think I can find someone to unload my ideas on and for them to make me a lot of money by implementing them??

Anonymous said...

So... are you trying to tell me that my 42-24-36 password is not strong??

REM said...

Don't get it. But thats ok.

Britney Smith said...

don't get either

Jane said...

So, Teri I am concerned. Neither Smith girl gets it. Looks like we are all exposed!

Anonymous said...

I found that Microsoft Password Checker's algorithm based primarly on words dictionary. Also, I know, algorithm of itsimpl.com based on words dictionary, too. Jetman.