Strong Passwords: Best Practices
A password policy is a set of rules designed to help users create strong passwords and manage them properly. It can be recommended or required.
Password Policy Definitions
Password Length: Is the minimum or maximum number of characters a password can have
Disallowed Characters: Characters not allowed in passwords. These are usually symbols.
Remembered Passwords: This setting remembers a certain number of passwords, discouraging users from repeatedly using the same password for security reasons.
Password Expiration: The password expiration period refers to the specific length of time before the user is required to update and change their current password for security reasons.
Password Storage: The way a company allows users to store passwords. Password managers are a common way to store passwords securely.
How to Create a Strong Password
Long: At least 16 characters.¹
Random: Use a mix of unrelated or random strings of letters, numbers, and symbols.¹
Unique: Each password should be different for each website.¹
How to Store Passwords
Password managers are a great way to store passwords securely, but they also need a strong password. BitWarden, 1Password, and Proton Pass are well-known password managers. Furthermore, using browser password managers is a step in the right direction. However, malware authors usually target them to steal your passwords.
Reasons to Use a Password Manager
Helps spot fake websites³
synchronize your passwords across your devices³
Can notify you if your password appears within a known data breach³
Multi-Factor Authentication
While strong passwords are essential, implementing multi-factor authentication (MFA) introduces another layer of security against cyber criminals. MFA requires users to complete two steps to verify their identity. To determine if you have MFA, consider these questions: Do you possess something you know (passwords), something you have (keycards), and something you are (biometrics) (Microsoft, 2022)? If you meet at least two of these criteria, then you are utilizing multi-factor authentication.
References
Formulate Strong Passwords and PIN Codes | CISA. (n.d.). Www.cisa.gov. https://www.cisa.gov/resources-tools/training/formulate-strong-passwords-and-pin-codes
Microsoft. (2022). What is: Multifactor Authentication. Support.microsoft.com. https://support.microsoft.com/en-us/topic/what-is-multifactor-authentication-e5e39437-121c-be60-d123-eda06bddf661
National Cyber Security Centre. (2018, December 17). Password managers: How they help you secure passwords. Www.ncsc.gov.uk. https://www.ncsc.gov.uk/collection/top-tips-for-staying-secure-online/password-managers
