Passwords, Passwords, Password

If there’s one thing you learn in life, it should be this: Never, ever use the same password for multiple accounts.

Ah, passwords. A very simple topic that anyone who makes an online account or owns a computer knows well. Unfortunately, human laziness is the ultimate boon to security. Simple, repeated passwords are the largest vulnerability hole of them all, leading to devastating hacks of personal accounts and large companies.

So I’ll keep it simple: Download a password manager. KeyPassXC is a good one, but BitWarden is also great (and is available on almost every possible phone and computer operating system). At the end of the day, however, these password managers are the same. They take the old-school password notebook and upload it to the computer.

How is this safe? Storing all the passwords in one spot seems like a risky bet. However, assuming the password to the database is incredibly strong (think several words long at the very least), it actually improves password security. Within password managers, one can generate randomized passwords to use on all accounts, avoind repetitions or easily guessed phrases. Instead of using P@ssw0rd1 on several accounts, one can use unique passwords for every account, such as Zx76gTh!shT6.

Randomly generated passwords are nearly impossible to crack. For example, the above password of Zx76gTh!shT6 would take approximately 384,752,893,146.37 days to crack based on Tulane University's Brute Force Calculator. Beyond using special characters, it isn't using a password found in a wordlist. Passwords such as P@ssw0rd1 are very common, leading them to be available on the internet. These data breaches get combined into wordlists such as the Rockyou.txt list, which contains over 14 million unique passwords. Feed it into a dedicated computer, and a hacker can be cracking an account in no time. Finally, even if one account gets caught up in a data breach, all other accounts will be safe because no passwords are reused. That is all for this simple security post; go forth and secure those accounts!

Action Items:

Install a Password Manager

Check for data leaks on your accounts at haveibeenpwned.com.