Password Security

Passwords are no longer simple to use or remember.  You need a strategy.  For example, if you keep a computer in a locked room it is OK to let the computer remember your passwords.  If you keep papers in a locked room it is OK to write your passwords down on one.  If you keep a list of passwords in a spreadsheet use an encryption tool and don't name the file "passwords." 

The best strategy is to use a password manager.  A password manager is a subscription service that generates and maintains passwords for you.  For example; BitWarden (https://bitwarden.com/) is free for personal use; or Apple's Keychain (https://support.apple.com/en-us/HT204085)  stores passwords and can automatically fill in password fields.  Learn more about password managers from this article: https://www.popularmechanics.com/technology/security/a26629/use-password-manager/

Other tips:

• Treat security questions just like passwords.  Make them longer than 12 characters and avoid the obvious.  For example, your favorite car may be a "Lear Jet 2 Tahiti" and your best friend may be a "Cat On A Hot Tin Roof".
• Don't share your passwords with anyone.  System administrators will never use email to ask for passwords.
• Defend your email. Your email account is the crown jewel of your online identity. Password resets, bank statements, personal details, and creative phishing scams are available to anyone who can read your email.
• The best way to protect your email is to use two-factor authentication.  What is Two-factor authentication?  See this 2 minute video:  https://youtu.be/0mvCeNsTa1g.   Contact the IT Helpdesk to get two-factor installed on your account.

Other recommended links:

• Passwords information from the Department of Homeland Security: https://www.us-cert.gov/ncas/tips/ST04-002
• More information on securing devices:  https://staysafeonline.org/stay-safe-online/securing-key-accounts-devices/