CISO Insights – October 2024

Welcome to this month’s CISO Corner! Let’s talk about something super important but often overlooked — creating secure passwords. We all know how annoying it can be to come up with a new password but trust me, it’s worth the effort to keep your personal information safe. Here are some useful tips.

First, a strong password should be at least 12 characters long and include a mix of upper and lower-case letters, numbers and special characters. Avoid using personal information like your name, birthday, pets’/kids’ names, hometown and steer clear of obvious patterns like “12345” or “password.” Instead, go for something random and unique.

Now, let’s talk about passphrases. These are fantastic alternatives to traditional passwords. A passphrase is basically a string of words or text that’s easy for you to remember but tough for others to guess. For example, “CorrectHorseBatteryStaple” is a great passphrase, because it’s long and has a mix of different types of characters.

When creating a passphrase, try to:

• Use a combination of unrelated words to make it harder to guess.

• Include some numbers and special characters for extra security.

• Avoid common phrases or quotes that might be easily guessed.

• Aim for at least 16 characters to make it super strong.

Passphrases aren’t only more secure but also easier to remember. Think of a passphrase as a mini-sentence or a collection of random words that make sense to you but are hard for others to guess. For instance, you could use a phrase like “BlueSky!GreenGrass#2024” which combines words, numbers and special characters. The key is to make it long and unique.

Another great tip is to use a password manager. These tools can generate and store strong passwords for you, so you don’t have to remember them all. This way, you can have unique passwords for each of your accounts, without the hassle of memorizing them.

Don’t forget that it’s important to use unique passwords for each of your accounts and change them regularly. A password manager can be a lifesaver, helping you generate and store strong passwords, without having to remember them.

Lastly, always use multifactor authentication (MFA) whenever it’s available. MFA adds an extra layer of security by requiring you to verify your identity in multiple ways, such as through a text message, email or authentication app. This makes it much harder for someone to gain unauthorized access to your accounts, even if they have your password.

By following these tips, you’ll be well on your way to keeping your accounts secure and your info safe. Stay vigilant and keep those passwords strong!