|
|
Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can cause risk since much of those details can be discovered by a simple examination of social media.
Creating strong passwords offers greater security for minimal effort. Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can
cause risk since much of those details can be discovered by a simple examination of social media.
Under Lock and Key
You can buy a small padlock for less than a dollar—but you should not count on it to protect anything of value. A thief could probably pick a cheap lock without much effort, or simply break it. And yet, many people use similarly flimsy passwords to “lock up” their most valuable assets, including money and confidential information. Fortunately, everyone can learn how to make and manage stronger passwords. It is an easy way to strengthen security both at work and at home.
What Makes a Password ‘Strong’?
Let’s say you need to create a new password that’s at least 12 characters long, and includes numerals, symbols, and upper- and lowercase letters. You think of a word you can remember, capitalize the first
letter, add a digit, and end with an exclamation point. The result: Strawberry1!
Unfortunately, hackers have sophisticated password-breaking tools that can easily defeat passwords based on dictionary words (like “strawberry”) and common patterns, such as capitalizing the first letter.
Increasing a password’s complexity, randomness, and length can make it more resistant to hackers’ tools. For example, an eight-character password could be guessed by an attacker in less than a day, but a 12-character password would take two weeks. A 20-character password would take 21 centuries. You can learn more about creating strong passwords in your organization’s security awareness training. Your organization may also have guidelines or a password policy in place.
Why Uniqueness Matters
Many people reuse passwords across multiple accounts, and attackers take advantage of this risky behavior. If an attacker obtains one password—even a strong one—they can often use it to access other valuable accounts.
Here is a real-life example: Ten years ago, Alice joined an online gardening forum. She also created an online payment account and used the same password. She soon forgot about the gardening forum, but someone accessed her payments account years later and stole a large sum of money.
Alice did not realize the gardening forum had been hacked, and that users’ login credentials had been
leaked online. An attacker probably tried reusing Alice’s leaked password on popular sites—and
eventually got lucky.
Guarding Your Passwords & PINS. Passwords and PINS protect sensitive data and it's critical to keep them safe. Try these best practices to stay protected.
1. Do not write them down – Many make the mistake of writing passwords on post-it notes and
leaving them in plain sight. Even if you hide your password, someone could still find it. Similarly, do
not store your login information in a file on your computer, even if you encrypt that file.
2. Do not share passwords – You cannot be sure someone else will keep your credentials safe. At
work, you could be held responsible for anything that happens when someone is logged in as you.
3. Do not save login details in your browser – Some browsers store this information in unsafe
ways, and another person could access your accounts if they get your device.
4. Use a password manager – These tools can securely store and manage your passwords and
generate strong new passwords. Some can also alert you if a password may have been
compromised.
5. Never reuse passwords – Create a unique, strong password for each account or device. This
way, a single hacked account does not endanger other accounts.
6. Create complex, long passwords – Passwords based on dictionary words, pets’ names, or other
personal information can be guessed by attackers.
One of the most common questions I receive is how to most efficiently save for education expenses. And I understand why – it’s a daunting prospect! The cost of college continues to rise, and student loan debt can plague you for decades following graduation. There is also a growing realization that college is not for everybody. How do you prepare for an expense that might not actually occur? However, it doesn’t have to be such an intimidating process. In fact, there are several effective strategies you can deploy to efficiently – and effectively – save for your child’s education expenses.
First, you need to determine how much you’ll need to save. Do you plan to cover the whole cost of school or just a portion (for instance: undergrad only, or will you cover grad school expenses for your child(ren)? Once you’ve set a number, your financial planner can assist in calculating a monthly savings rate required to work toward that goal.
The next step is deciding what type of savings account(s) to use. There are different accounts that are specifically designed to save for college, for example: 529 plans and Coverdell Education Savings Accounts. Below are some of the reasons why a 529 Plan and/or investment accounts may be a better solution.
A 529 plan allows you to contribute to an account on behalf of a named beneficiary (in this case, your child). Because the government wants to reward saving for educational expenses, contributions to 529 plans receive preferential tax treatment and are able to grow tax-deferred. You can use the money in the account to pay for qualified educational expenses, tax-free. Contributions to these accounts are also typically deductible on state tax returns. The drawback to a 529 is that the money must be used for qualified education expenses – or you will face tax penalties.
An individual/joint investment account is an account owned by yourself or jointly by you and your significant other. Money invested in this type of account does not receive preferential tax treatment; however, your money can be withdrawn for any reason without tax penalties.
Given the shifting trends in higher education, it is my belief that a combination of 529 plan contributions and individual/joint account contributions will help to save for college education. This form of education planning allows for flexibility; for instance, if your child(ren) decide(s) against traditional higher education, you won’t have to pay tax penalties on all of your education savings, as a portion of that savings is held in an individual/joint account with no restriction on how the assets are used.
While education planning is important it is only one component of a full financial plan. If you would like to talk more about education planning and its impact on your personal financial plan please contact me at zach.swaffer@trilogyfs.com
The opinions voiced in this material are for general information only and are not intended to provide specific advice or recommendations for any individual. To determine what is appropriate for you, consult a qualified professional.
