From the course: Help Yourself: Tech Tips Weekly

Being password smart

- [Instructor] The goal of being password smart is to find a secure password that the bad guys can't guess but at the same time, won't drive you nuts typing it in. I recommend all of these techniques. Use upper and lowercase letters, numbers, symbols, and make the password at least eight characters long, the more the better. Now you don't need to create a jumble of untypeable text as your secure password. Instead, string together some unrelated words and symbols. Now don't use words that people could easily guess, something that someone knows about you. Keep the words random. Here are some examples of unrelated words, symbols, and numbers that could be used as a passwords. These are a lot easier to type than the random letters and numbers you often see as a strong password and they're just as difficult for the bad guys to guess. Create a unique password for each of your online accounts, your email accounts, your Windows sign in, and so on. Never use the same password twice. And don't reuse passwords. Write down these passwords. Now I jot mine down in a book where they mean nothing out of context. Yet the passwords are handy should I need to remember what they are. Security experts recommend that you change your password at least once every six months. Your organization's security policy may mandate changes more frequently and changing the password does make your account more secure, especially when you suspect a compromise or you know that the account has been hacked. Change your password immediately. For more security, some sites and services provide two-factor authentication. For example, your access must be verified by a text message to your phone providing you a pin that you then type in to confirm your identity. Third party verification apps are also available such as Symantec's VIP Access. It provides a unique number generated after an interval of time that becomes part of your password. Many banks and government organizations use this type of two-factor authentication. Above all, be smart with your password. Never give it out online or over the phone to anyone. Never send your password in an email message. And be on the lookout for phony websites, the so-called phishing attacks that may dupe you into typing a password by mistake. Follow these rules to help protect your accounts and online identities.

Contents