Password protection is increasingly vital for businesses as cybercriminals continue attempting to infiltrate networks of large corporations and small companies.
Strong passwords are the first line of defense.
Norton, a digital security provider, notes these alarming statistics:
- Hackers exposed more than 24 billion passwords in 2022.
- Over 80% of breaches are traced to weak passwords, stolen passwords or reused passwords.
- Only half of internet users are familiar with best practices for password security.
The last statistic is especially concerning for businesses. Generally, companies trust employees to create strong passwords, but don’t often monitor password selection. That means a company protecting its systems with a firewall, antivirus program and other measures is still exposed.
Password protection is often a forgotten component of a business’ overall cybersecurity plan.
BLOG: Cybersecurity tips to protect your passwords
The Password Puzzle
A generation ago, computers might have been the only devices that needed a password. Today, individuals need to remember dozens of passwords beyond computers, tablets and cell phones. The emergence of smart homes means A/C systems, kitchen appliances, security cameras, garage door openers and other household devices need passwords. And, of course, every online account requires a password to log in – banks, investment portfolios, credit cards, social media, travel sites, shopping platforms and more.
It’s tough to remember so many passwords.
In fact, NordPass notes the average person now has 168 passwords when considering personal and work accounts. Unfortunately, many people have not created a unique password for each account. A LastPass survey noted 62% of respondents admitted to “always” or “mostly” using the same password, or a slight variation, across accounts. That is troublesome because hackers who obtain a password might be able to access dozens of accounts.
BLOG: Practice cyberhygiene to keep devices, data safe
Password Protection Tips
CRS Technology Consultants recommends that its business and nonprofit partners establish a written IT plan that governs all policies and procedures. One chapter should be devoted to password protection.
Businesses should establish rules for passwords. These rules do not create passwords. Rather, they are digital policies that only allow employees to generate passwords that meet specific parameters:
- Frequency: Require employees to change passwords every 30-90 days. Cybercriminals often take months or years to act on compromised passwords, so by the time they attempt to gain access, employees have already changed the password.
- Complexity: Use a complex combination that requires at least one character from four distinct groups: an uppercase letter, lowercase letter, numeral and symbol.
- Length: Set a minimum number of characters for a password, generally at least 12 characters. Do not set a maximum. This allows employees to use a complete sentence, which is a very strong password.
- Diversity: Employees should not create new variations of the same password (example: changing PaperBoy#14 to PaperBoy#15). Instead, require that at least half of the password be different.
Additionally, businesses should encourage employees to never use the same password for work and personal accounts. Also, employees should not write down passwords on a sticky note that sits near a computer.
DID YOU KNOW? Three of the most common passwords used across accounts are “123456,” “password” and “admin.”
Take Action Today
Businesses must be proactive about their digital security. Too often, companies do not implement adequate security measures until AFTER cybercriminals have compromised the network.
All businesses should partner with an IT specialist to implement adequate levels of password protection. Education is often the key to digital security. These three education initiatives can help businesses protect their digital livelihoods:
- Training: Host a quarterly or annual training session that covers digital security, including password protection. Invite your IT partner to lead the session.
- Tips: Distribute a weekly or monthly digital security tip. These can be simple reminders about passwords, spam, phishing or other topics.
- Examples: A simple Google search can find examples of data breaches and cybersecurity lapses caused by human behavior. Share news stories and blogs produced by media, antivirus companies and IT experts.
READ MORE: Tech Resources
Let’s Connect
Looking for a technology partner to help your business implement adequate password protection? Contact CRS Technology Consultants to schedule a consultation! Complete our online form, drop us an email at info@CRSTC.com or give us a call 239-542-8450.
