Wiki source code of Password Security and Hygiene
Version 42.1 by Chase Eckert on 2026/05/21 09:38
Hide last authors
| author | version | line-number | content |
|---|---|---|---|
| |
27.1 | 1 | {{toc/}} |
| |
3.1 | 2 | |
 |
30.1 | 3 | === {{id name="Good-Passwords-Are-Hard-To-Find"/}}Good Passwords Are Hard To Find === |
| |
27.1 | 4 | |
| |
35.1 | 5 | The best passwords are easy to remember, hard to break. This can be a problem; if a password is too difficult to remember – meaning it meets complexity requirements and is long enough to withstand attempts to crack it – it will likely wind up on a [[note in your desk drawer or taped to your monitor>>url:https://www.nngroup.com/articles/security-and-human-factors/||shape="rect"]]. |
| |
30.1 | 6 | |
| |
7.1 | 7 | === {{id name="How-Do-I-Choose-A-Good-Password?"/}}How Do I Choose A Good Password? === |
| |
3.1 | 8 | |
| |
36.1 | 9 | Arguably, the best advice comes from someone that understands how passwords are cracked; [[explained here>>url:https://www.schneier.com/essays/archives/2008/11/passwords_are_not_br.html||shape="rect"]]. Come up with a passphrase; once you have something you'll remember, make another that is //similar// and check how strong the //similar password// is (never put your password anywhere except when using or saving it to a password manager): [[this one works through your browser>>url:https://random-ize.com/how-long-to-hack-pass/||shape="rect"]] so you won't be uploading your sensitive information anywhere, but it is still a good idea to test one that is different from your real password. If the similar password is as strong as you want it to be, use the one it mimicked, and remember to change it on occasion ([[it's not as bad as it sounds>>url:https://blog.lastpass.com/2018/08/often-change-password||shape="rect"]]). |
| |
2.1 | 10 | |
| |
42.1 | 11 | Use [[1Password >>url:https://1password.com/password-generator?utm_source=google&utm_medium=cpc&utm_campaign=21508558926&utm_content=707340140391&utm_term=password%20tool&gclsrc=aw.ds&gad_source=1&gad_campaignid=21508558926&gclid=CjwKCAjw2rrQBhBuEiwAarLWHQyfHaTQOQj1JHMnfSl-BxtUArvMHmixbufXq_Gf9wXCzptycxRhVhoCNYMQAvD_BwE||shape="rect"]]to create secure passwords. |
| 12 | |||
| |
7.1 | 13 | === {{id name="Compromised-Accounts-And-Passwords"/}}Compromised Accounts And Passwords === |
| |
2.1 | 14 | |
| |
7.1 | 15 | We hear about high-profile breaches; if you are affected by one of these, the parties responsible for keeping your information safe will eventually contact you and let you know what you can do about it. |
| |
2.1 | 16 | |
| |
31.1 | 17 | But [[it has been reported>>url:https://arstechnica.com/information-technology/2019/01/hacked-and-dumped-online-773-million-records-with-plaintext-passwords/||shape="rect"]] that [[nearly a Billion compromised email accounts>>url:https://www.forbes.com/sites/kateoflahertyuk/2019/01/17/collection-1-breach-how-to-find-out-if-your-password-has-been-stolen/#28c21b512a2e||shape="rect"]] are published online. If you wonder whether yours is among them, head to [[';~~-~~-have i been pwned?>>url:https://haveibeenpwned.com/||shape="rect"]] and enter an email address. If you find yours, change your password for every account that uses that email address or password. You can also check whether [[one of your passwords has been compromised>>url:https://haveibeenpwned.com/Passwords||shape="rect"]] and sign up for notifications in the event of a future breach or 'sensitive' data dump exposes your information. |
| |
2.1 | 18 | |
| |
42.1 | 19 | [[image:attach:check_your_accounts.jpg||custom-width="true" original-height="640" data-xwiki-image-style-alignment="start" width="170" original-width="960"]] |
| |
2.1 | 20 | |
| |
7.1 | 21 | === {{id name="Why-It-Matters"/}}Why It Matters === |
| |
2.1 | 22 | |
| |
7.1 | 23 | The average person has about 25 online accounts and most people [[recycle their passwords>>url:https://www.google.com/search?q=how+many+people+use+the+same+password+for+multiple+accounts&rlz=1C1GCEA_enUS798US798&oq=how+many+people+use+the+same+password+for+multiple+accounts&aqs=chrome..69i57.9127j0j7&sourceid=chrome&ie=UTF-8||shape="rect"]]. If you are among them, a single breach could affect all accounts using a common email address/username or password. It doesn't matter how strong a password happens to be; if it's already online you can never use it safely. |
| |
4.1 | 24 | |
| |
7.1 | 25 | === {{id name="What-To-Do"/}}What To Do === |
| |
4.1 | 26 | |
| |
7.1 | 27 | Our brains can only hold so much. [[In this survey>>url:https://www.ncbi.nlm.nih.gov/pmc/articles/PMC3515440/||shape="rect"]], 72% of the 263 participants had difficulty remembering their passwords. The result, as we already know, is we reuse and write down passwords. There are techniques for remembering passwords, but we can [[expect to need even more passwords>>url:https://techxplore.com/news/2018-12-passwords-ready.html||shape="rect"]] in the coming years. |
| |
4.1 | 28 | |
| |
34.1 | 29 | REMC1 is always looking at security; you've probably heard us mention 2-step verification (aka 2-factor authentication) and password managers. |
| |
7.1 | 30 | |
| |
32.1 | 31 | === {{id name="Password-Managers"/}}Password Managers === |
| 32 | |||
| 33 | Reputable password managers are available for your phone as well as your computer. [[Bitwarden>>url:https://bitwarden.com/||shape="rect"]] is free and [[promises to always be free>>url:https://proprivacy.com/password-manager/review/bitwarden#:~~:text=Bitwarden%20is%20free%20and%20open,for%20a%20premium%20personal%20account.||shape="rect"]]. | ||
| 34 | |||
| 35 | [[LastPass>>url:http://lastpass.com||shape="rect"]] offers [[a way to verify password strength>>url:https://support.logmeininc.com/lastpass/help/use-the-security-challenge-lp030011||shape="rect"]], however recent changes allow you to use it for free only on either mobile devices or desktop machines, not both. | ||
| 36 | |||
| |
42.1 | 37 | [[image:attach:password_managers.jpg||custom-width="true" original-height="842" data-xwiki-image-style-alignment="start" width="170" original-width="1117"]] |
| |
7.1 | 38 | |
| |
18.1 | 39 | \\ |
| 40 | |||
| |
34.1 | 41 | === {{id name="2-Step-Verification-(2-factor-/-multi-factor-authentication)"/}}2-Step Verification (2-factor / multi-factor authentication) === |
| |
18.1 | 42 | |
| |
42.1 | 43 | This feature provides an additional layer of security in case your password is compromised. REMC1 highly recommends that staff, especially administrative and administrative assistant staff, utilize this feature for their Google Account. Learn more about this at the [[Google Account Help Section on Setting up 2-Step Verification>>url:https://support.google.com/accounts/answer/185839?hl=en&ref_topic=7189195||shape="rect"]], our [[wiki page>>doc:PS.Google.Configuring 2-step(2-factor) authentication for Google.WebHome]], or viewing our [[video tutorial>>url:https://mistreamnet.eduvision.tv/Share.aspx?q=CT1wecDsedCLqkXQGflKaw%253d%253d||shape="rect"]]. |
| |
18.1 | 44 | |
| |
39.1 | 45 | === {{id name="Setting-up-2-factor-authentication-with-Yubikeys"/}}**Setting up 2-factor authentication with Yubikeys** === |
| 46 | |||
| |
42.1 | 47 | **Learn more about setting up 2-factor authentication with Yubikeys by visiting the [[**Yubikeys wiki page.**>>doc:PS.Cybersecurity.Password Security and Hygiene.YubiKey Set-Up And Use\: Two Factor Authentication Using Hardware (YubiKey) To Secure Google, Bitwarden, LastPass.WebHome]]** |
| |
39.1 | 48 | |
| |
8.1 | 49 | === {{id name="Questions?"/}}Questions? === |
| |
7.1 | 50 | |
| |
22.1 | 51 | REMC staff is happy to answer any questions you have on potential spoofing, viruses, malware, and security. |
| |
14.1 | 52 | |
| |
7.1 | 53 | \\ |
| 54 | |||
| |
21.1 | 55 | \\ |