Choosing Safe Passwords

Your passwords are the online equivalent of the lock and key to your house. Using easy-to-decipher passwords is akin to hanging the key to your house outside of your door so anyone passing by can use it. Passwords are a major defense; developing good password practices will keep your personal information and identity more secure. Below are some suggestions for developing better passwords:

  • Passwords should have at least eight characters and include upper case (capital letters) and lowercase letters, numerals and symbols.
  • Avoid common words: some hackers use programs that try every word in the dictionary.
  • Don’t use personal information—name, children’s name, birthdates, etc. that someone might already know or easily obtain.
  • Change passwords regularly—at least every 90 days. If you believe you system has been compromised, change passwords immediately.
  • Use different passwords for each online account you access (or at least a variety of passwords).
  • If you must write down passwords, under no circumstances should you store them in a document on your computer. Keep them in a secure location away from your computer.

One reason people pick passwords that are too easy is because they think they are going to forget them.  One way to create a strong easy to remember password is to think of a memorable phrase and use the first letters, upper case and lower case letters, numbers, and maybe an added twist to make it secure. For example, "Only you can prevent forest fires” could become:  oYcp4estF

Increasingly, online service providers are implementing new tools to create secure access to accounts. Some involve additional levels of authentication. For example, some sites now offer a small device that attaches to a key chain that gives you a new numeric password every time you log on. Once that password has been used, it can never be used again.