Most Passwords Are Unsafe

One of the easiest ways to break into a system is to use common passwords. Most software packages, Internet appliances and even switches ship with default passwords. Sometimes these "passwords" are NULL -- in other words, there is no password assigned.

Many attempts against the security of systems are performed in an attempt to get a hold of encrypted passwords. These password files are then subjected to brute force attacks using common or dictionary words. Unfortunately these type of attacks are often successful.

The best way to prevent your password from being hacked is remembering one simple rule. A password is like underwear, change them often and don't share them with others. However in this information technology age with almost everything requiring a password this can sometimes be a painstaking and daunting task. Passwords are the lifeblood of your online existence. Think about it; a password gets you into your computer, email, online banking, and a host of other areas, yet a number of individuals still keep them under their keyboards or in the top drawer of their desks. My goal here is not to criticize anyone for the way they keep their passwords, whether that practice is safe, unsafe, or uses the "Forgot my Password" link every time the site pops up.

Secure Password Tips

• Don't use words that can be found in the Dictionary. Password hackers use hundreds of thousands of common words when they're trying to crack your password. Make something up.
• Don't use any personal information. Someone who does some research can usually find out your phone number, birth date, special dates, names of your kids or pets, etc. Keep away!
• Do use special characters. Include punctuation characters and numbers in your passwords.
• Do use mixed case. Include both UPPER and lower case characters in your pASSwoRd!
• Use different passwords for important systems. Never use the same password you may have assigned yourself at a web site for your file server, or even internal e-mail system. By using different passwords often, you are limiting your exposure for a password breach to (hopefully) one system.
• Don't give your password to anyone. Your system administrator can reset your password if necessary, but make sure you change it soon. If someone is asking you for your password treat the conversation like they were asking for your social security number or your credit card information.

Recently I discovered a little freeware application called KeePass. The rest of this article points out a few of the key features KeePass offers and how they can help you keep your passwords safe.

Note: KeePass is available for free download from here

KeePass is designed to store all of your passwords in a small database and provide easy access to them whenever necessary. The database is secured by a master password or password file or for the most secure option, both a master password and password file