|
|
Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can cause risk since much of those details can be discovered by a simple examination of social media.
Creating strong passwords offers greater security for minimal effort. Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can
cause risk since much of those details can be discovered by a simple examination of social media.
Under Lock and Key
You can buy a small padlock for less than a dollar—but you should not count on it to protect anything of value. A thief could probably pick a cheap lock without much effort, or simply break it. And yet, many people use similarly flimsy passwords to “lock up” their most valuable assets, including money and confidential information. Fortunately, everyone can learn how to make and manage stronger passwords. It is an easy way to strengthen security both at work and at home.
What Makes a Password ‘Strong’?
Let’s say you need to create a new password that’s at least 12 characters long, and includes numerals, symbols, and upper- and lowercase letters. You think of a word you can remember, capitalize the first
letter, add a digit, and end with an exclamation point. The result: Strawberry1!
Unfortunately, hackers have sophisticated password-breaking tools that can easily defeat passwords based on dictionary words (like “strawberry”) and common patterns, such as capitalizing the first letter.
Increasing a password’s complexity, randomness, and length can make it more resistant to hackers’ tools. For example, an eight-character password could be guessed by an attacker in less than a day, but a 12-character password would take two weeks. A 20-character password would take 21 centuries. You can learn more about creating strong passwords in your organization’s security awareness training. Your organization may also have guidelines or a password policy in place.
Why Uniqueness Matters
Many people reuse passwords across multiple accounts, and attackers take advantage of this risky behavior. If an attacker obtains one password—even a strong one—they can often use it to access other valuable accounts.
Here is a real-life example: Ten years ago, Alice joined an online gardening forum. She also created an online payment account and used the same password. She soon forgot about the gardening forum, but someone accessed her payments account years later and stole a large sum of money.
Alice did not realize the gardening forum had been hacked, and that users’ login credentials had been
leaked online. An attacker probably tried reusing Alice’s leaked password on popular sites—and
eventually got lucky.
Guarding Your Passwords & PINS. Passwords and PINS protect sensitive data and it's critical to keep them safe. Try these best practices to stay protected.
1. Do not write them down – Many make the mistake of writing passwords on post-it notes and
leaving them in plain sight. Even if you hide your password, someone could still find it. Similarly, do
not store your login information in a file on your computer, even if you encrypt that file.
2. Do not share passwords – You cannot be sure someone else will keep your credentials safe. At
work, you could be held responsible for anything that happens when someone is logged in as you.
3. Do not save login details in your browser – Some browsers store this information in unsafe
ways, and another person could access your accounts if they get your device.
4. Use a password manager – These tools can securely store and manage your passwords and
generate strong new passwords. Some can also alert you if a password may have been
compromised.
5. Never reuse passwords – Create a unique, strong password for each account or device. This
way, a single hacked account does not endanger other accounts.
6. Create complex, long passwords – Passwords based on dictionary words, pets’ names, or other
personal information can be guessed by attackers.
Due to the nature of my profession, I am solicited for financial advice in all aspects of my life from all types of people. Similar to a doctor who gets asked about symptoms at birthday parties, people often ask for my opinion or input on financial matters, particularly investing. As most doctors will tell you, it’s hard to give advice when you don’t know the particulars.
However, if someone is really eager or serious for guidance on investing, I will suggest that they do their homework. The information they’re looking for isn’t found on the stock exchange or the Finance section of a newspaper. Most times, the information you need to start with is found a lot closer than you would expect.
The first thing to take into account are your financial goals. As I’ve mentioned before, being aware of your financial “why” can highlight good habits, change inefficient patterns, refocus priorities and ultimately develop a plan to help you achieve your financial freedom. Therefore, you need to be specific. Do you want to retire in 30 years? Perhaps you want to buy a house in five years or start a business in two. In these scenarios, your goals act as targets, and with the help of a good financial planner, you can develop an action plan with measurable steps to incrementally achieve them.
Another thing to be aware of is your risk tolerance. This isn’t a measure of whether you like to bungee cord jump or skydive. Rather, this is an indication of how much volatility in your investments you are comfortable with. This is something that needs to be determined for the individual as well as the household. Risk tolerance is a very personal indicator, and there are times that couples don’t see eye to eye. When new clients come in, we have them complete a risk tolerance questionnaire to not only to see how individuals may or may not be working together but to also figure out the most effective plan to achieve their goals. The last thing we want you to do is tackle investments that won’t achieve your goals in a timely.
As you can tell, these items are all very personal. What you’re saving for, how long and hard you’re willing to work towards your goals, and what your income and lifestyle needs are, both current and future, will all be factors in planning how to invest. I bring this up because so many clients come in referring to the advice their friends, neighbors or coworker gave them. As I’ve mentioned before, I’m all for educating one’s self. Let’s discuss your options. But please don’t think that investing in what your child’s Little League coach is investing in is automatically the best option for you.
Let me put it another way. I’ve been athletic all of my life, playing high school and college baseball and an avid golfer. Knowing that, I’m not going to start a new exercise regime with a leisurely walk around the block or bench pressing 400 pounds. It’s not that I don’t believe these fitness goals are valid – they’re just not valid for me. The same idea can be applied to your finances. If any of the factors I’ve mentioned are not aligned, you may discover that the grass isn’t always greener on the other side, and that you need to be wary of the barb wire in between.
I know it sounds odd, that investing should be more complicated. But the truth is knowing your financial self is much important than knowing the stock market when you first start investing.
