Friday, June 25, 2010

How do I keep track of all my passwords?

If you are anything like me then you will have dozens of different online and other accounts requiring user codes and passwords.

How do you keep track of all these different passwords?
Obviously writing passwords down is a no-no right? But that means you have to keep them all in your head. Unless you have taken George Orwell's 1984 to heart or you are my wife, you will figure that no-one can mind-read. So in theory keeping everything in your head would be very secure.

It can sometimes be very secure. So secure in fact, that you yourself cannot recall what the password was for a certain account! That is where the trouble with passwords starts.

In an effort to remember your password there are few fatal traps you can resort to.
  1. Get lazy - You can use passwords like 'password' or 'drowssap' (password backwards) '123456', 'abc123' or even you own name. This is like leaving the key in the door for any hacker wanting to get into your account.
  2. Get sentimental - you could use the name of someone close to you, but listen, there is no romance in being hacked because you used your loved one's name for a password. This is like leaving the key under the doormat.
  3. Show your colours - This is just a variation of being sentimental but about your favourite sports team instead of your favourite person. This is like leaving your key under the potplant by the door.
  4. Use the same password for everything - This is potentially the worst of all passwords sins. If someone gets hold of this password, they could get into everything and since you use it for everything, the chances someone getting it are much increased! This is like putting your name and address on your key ring with your master key
So, if you find yourself described in one of those categories, you have low password security and would benefit from a change of habit. Here's an idea that may help you while also helping you to;
  • avoid writing down your passwords
  • avoid using generic or guessable passwords
  • remember your passwords
  • increase your security
Not all accounts have the same value. That is, your internet bank account probably has more value to you than your carpooling log in. Then there are some that are in the middle, like your gmail password or Facebook, perhaps your WoW password is in the middle somewhere. Lets say you identify 3 different levels. To help you remember passwords for things that are not that important from a security point of view you could use a single hard to hack password for all those. For level 2 you have a completely different password, perhaps with variations for each application. Level 1 you have a different password for each level 1 account.

Now, does all this make your memory better? No, but perhaps it gives you a framework to remember what password you chose based on the account and maybe the act of being more deliberate about setting the password helps your memory too.

Good luck and change regularly.



No comments: