Rethinking traditional password protection strategies

November 30, 2011 12:05
As cybercriminals continue to crack codes and breach systems around the world, it may be time to abandon conventional password protection wisdom and explore the potential of password manager software.

As cybercriminals continue to crack codes and breach systems around the world, it may be time to abandon conventional password protection wisdom and explore the potential of password manager software.

Computer and mobile device users have been hearing the same password protection advice from consumer advocates and technology pundits for some time now. Most users are now fully aware that pet names and birthdays are less effective passcodes than the often-recommended combination of eight or more random characters.

But according to Internet Evolution contributor and software engineer Stephen Gallagher, following these so-called best practices may be providing a false sense of security.

"Brute-force attempts to try every possible combination, while inefficient, could crack your password in a few days or weeks of dedicated work on modern computers," Gallagher wrote in his latest column.

Adding complexity may not be the most viable solution either. According to Gallagher, difficult-to-remember passwords may inspire users to write down their credentials in a separate location, introducing entirely new online security concerns.

Instead, experts have advised employing a password organizer tool that can both generate and store strong passwords for a dozen or more accounts.

Identity Security Solutions

March 08, 2012 A new study shows that internet users are becoming more cautious in their behaviors, especially when spending ...

March 02, 2012 For the 12th consecutive year, the No. 1 complaint sent to the Federal Trade Commission involved identity ...

February 24, 2012 Although people remain fearful of the impact identify theft, many are failing to take the appropriate steps ...

February 10, 2012 Companies with many employees may run into serious trouble if their staff members are using the same ...

February 07, 2012 A recent Reuters report indicated that VeriSign, which is responsible for ensuring people access more than ...

February 01, 2012 By declaring February 1 "Change Your Password Day," organizers hope to bring light-hearted attention to the ...

January 30, 2012 Passwords are a central component of online security frameworks, but for too many users they have become the ...