World Password Day
Did you know that May 2nd 2024, marks World Password Day?
Created by cybersecurity professionals in 2013, this annual event, observed every first Thursday of May, serves as a reminder to cultivate strong password habits to safeguard our digital lives. While it may seem peculiar to dedicate a day to something as mundane as password management, the significance cannot be overstated. In today’s interconnected world, where online activities encompass work, education, shopping, healthcare, and more, ensuring the security of our accounts is paramount.
As well as the security risk posed if we aren’t vigilant enough, password management can be time consuming and, frankly, boring. Creating complicated passwords that are memorable, thinking of different passwords for different logins, remembering which password for which account… can all be a hassle we don’t need.
Liberate Yourself with Passwordless Authentication
Yes, you can now secure access to your Microsoft account without passwords. By leveraging the Microsoft Authenticator app, Windows Hello, a security key, or verification codes sent to your phone or email, you can embrace a passwordless experience across Microsoft applications and services. Simply follow these five steps:
- Download and install Microsoft Authenticator, linked to your personal Microsoft account.
- Sign in to your Microsoft account.
- Navigate to Security and select “Turn on” under the Passwordless account section within Advanced security options.
- Approve the notification from Authenticator.
- Once approved, bid farewell to passwords to access your Microsoft accounts. If you ever decide to revert to passwords, you can easily disable the passwordless feature. Remarkably, nearly all Microsoft employees have adopted passwordless options for logging into their corporate accounts.
Enhance Security with Multifactor Authentication
One effective measure to fortify account security is implementing multifactor authentication, which mitigates 99.9% of account compromise attempts. The Microsoft Authenticator app, offering various authentication options such as time-based one-time passcodes (TOTP), push notifications, and passwordless sign-in, can be utilised across platforms supporting multifactor authentication. Whether on Android or iOS, Authenticator facilitates enabling or disabling two-step verification for your Microsoft Account. Typically, multifactor authentication is required only during initial sign-in or password changes; thereafter, your recognised device simplifies the sign-in process.
Ensure Your Password Isn’t the Weakest Link
Weak passwords often serve as gateways for attackers. Utilising simplistic passwords across multiple accounts, while convenient, poses significant risks. Attackers exploit personal information gleaned from social media to guess your easily remembered passwords. According to one survey, 68% of people recylce passwords across accounts, amplifying the vulnerability. Successfully compromised credentials are frequently traded on the dark web for further malicious activities.
Here are some password basics to adhere to:
- Maintain a minimum password length of 12 characters.
- Incorporate a blend of uppercase and lowercase letters, numbers, and symbols.
- Refrain from using dictionary words, names, or identifiable information.
- Ensure passwords differ significantly from previous ones.
- Promptly change compromised passwords.
Consider using a password manager, such as Microsoft Edge or Microsoft Authenticator, to generate and store robust passwords, simplifying access to your accounts. Additionally, exercise caution when sharing personal information and remain vigilant against suspicious messages and attachments. Implement device locks, verify app authenticity, update browsers regularly, and leverage security features like Tamper Protection in Windows 11 to bolster your defences.
