Folks, sometimes we forget that the obvious isn’t always so.
When you start using the Internet, especially these days, it is easy to get overwhelmed by the sheer ease of access and the plethora of applications available out there.
Google is a prime example. At last count they have over 30 applications that can be linked to a Google account! That is amazing when you think that you can store information from almost every aspect of your life online, all accessed by one account. Fantastic!
Oh, wait… is that really so great? What happens if someone gets a hold of my account details?
Yes, that’s right. Your personal life, business life and probably the lives of your friends have just become the property of a stranger.
If you are lucky they will simply use your account to spam everyone to whom you have every sent an e-mail, delete everything that they can, and then abandon your account after on-selling all of those e-mail addresses to other spammers. If you are lucky. If not, be prepared to see random aspects of your private life appearing in strange places on the ‘Net.
So how does this happen? Hollywood would have us believe that some secretive hacker is pouring over records stolen from your garbage looking for clues to your password, using well-crafted code to try and sneak past your security, and using your account to blackmail you or your friends. Unfortunately the truth can be a little less exciting.
Quite often we will set up an account and be sent a randomly generated password. Of course, being randomly generated and thus frequently very secure we find that these passwords are much too complex to remember so what is the first thing we do? Change it to something that we can remember easily. After all, that way we don’t have to write it down, do we? ‘Cause writing down passwords is bad, isn’t it?
Almost everyone will, under the pressure of the moment, choose a password that is a word or simple phrase that is meaningful to themselves; unfortunately that usually results in a very weak password; one that can be worked out with a brute force attack by a 14 year old dweeb from a third world country with badly written code.
Add to that if we set up multiple accounts with other providers, such as Windows Live or Yahoo, we tend to use the same or very similar passwords. Guess where the dweeb is going to go next?
It is really very simple: Do not use single words or simple phrases as passwords. If you must, use random capitals and replace random characters with numbers and punctuation. Not by replacing every ‘oh’ with a ‘zero’, that would be too simple. Replace one ‘oh’ with a zero and leave the others: better. Replace another ‘oh’ with the word zero? Even better; add random punctuation for good measure. You get the idea. Think about the password before you start the process of changing it; that way you are not suddenly confronted with trying to work one out at the last minute.
Regardless of what sort of password you use, one rule remains inviolate: Do not store personal or business information that you wish to remain private online. Ever. Nothing that can be accessed from the Internet can be considered truly safe. Unless you use one of those one-use-only randomly generated digital keys thingies and are accessing the information via a VPN tunnel that is set up better than the DoD you are essentially putting your private life in a box on the sidewalk secured with packing tape.