Monday, January 23, 2012

Password management - Bane or a boon


Password are the most crucial form of privacy in the Internet (and basically on all computer technologies). Its importance is similar to our own brain. It is what separates us to the rest of the world. It is our "key" to the privacy. That is why there are lots of password management (i.e. changing passwords, unlinking passwords, renewing password based on reset policies), password encryption (i.e. , password requirements and password retrieval measures enacted on most Internet applications. The problem is that passwords are so crucial that it is usually a big problem specially on people who have problems remembering or suffering from selective memorization (i.e. fails to completely give time to memorize the pattern or password they made). In this episode I would give the ideas on how important passwords are, how to make a formidable password, what to avoid making the common failures in password generation (or creation) and how to secure passwords. I hope that I could light up some "bulbs" in you so you could immediately make your way into lesser passwords management (and lesser concern on privacy or personal security) and focus more on productive works.

Why Passwords are important?

Passwords add extra layer of security to your accounts. It gives your both personalization and privacy when you use password. Due to the personalization nature (or uniqueness), passwords are the best forms of security you could provide to yourself. Since it is intangible, no form, and kept on the safest part of the world (yes, your brain is the safest part of the world), it gives yourself FULL CONTROL to it. Your privacy and personal security is most protected when you have full control and that is achievable through passwords. Real life analogy dictates that passwords are like keys to your bank vaults. As long as the passwords are safe, so whatever you are protecting or keeping.

How to make a formidable password?

A formidable password should have some form of disguise. It makes it hide its form and use and can only be used by the one who owns it (or authorized to use it). In computing technology, the advisable passwords should be:

  1.  Composed of mixed upper case and lower case alphanumeric and special characters with password lengths greater than eight (8).
  2. Does not relate to ANY of your personal records like birthdays/anniversaries, cellphone number, land line number, credit card number or even bank account numbers, or car registration number)
  3. Easily remembered but not easily known to others (i.e. somewhat in a coding scheme which will be discussed further)
  4. Has no copy written anywhere that is purely unsafe or not under your full control (i.e. notepads, unencryted documents, shared drives in your companies, and even on your mobile computers and phones)

I learned a scheme in memory enhancement programs about how to do this. It is called Linking methodology where one takes a portion of some very known thing to you then you chain it to the resource you are accessing PLUS a certain breakthough character. This is a powerful mechanism that will help you memorize different passwords without even writing them down anywhere.

Example:

I am using Yahoo! Email. My very known item is a computer mouse (or simply a mouse). Since the mouse is almost always available when you are using your computer, it is a good start idea. I'll take "M" (capital "M") from the mouse while I imagine one (1) hundred mice running across biting Yahoo!'s smiley face icon. When the mice are finished, the smiley face is dropped on the floor with a huge bubble on its head saying "#" (which is usually used as emoticon for anger). Now linking (or chaining) a portion of the information, I could create a possible formidable password to my Yahoo! Email without giving me headaches on remembering it. You can modify the system as it suits you and gives you a little bit easier approach to it (like instead of taking the first letter, you take the last letter of Yahoo)

Capital "M" + "100" + "Y" + # + "email"  =  M100Y#email

The resultant of the little exercise is a formidable password. It is a mixture of uppercase and lower case alphanumeric characters and special characters. It has a password length greater than 8. It is not related to any of your personal information. Since the linking of these things exists only in your mind, it cannot be copied (unless it is phished from you while you are entering it which we will discuss on other episodes). And lastly, you do not need to write it down as you have a formidable system wrapping your password scheme.

All in all, passwords that are wrapped in a system or methodology known only to you gives you all the freedom to create a lot of passwords from different application without injuring yourself on remembering them. Passwords that are safe and in your full control will give you the promise it serves, and that is to provide security to your personality and privacy.

No comments:

Post a Comment