Cyber Risks · Krebs on Security

Password Do’s and Don’ts

Summary: Krebs on Security's password guidance recommends unique passwords combining words, numbers, symbols, and mixed case, and warns against dictionary words, keyboard patterns like "qwerty" and "123456," and personal details such as birth dates and family names. It notes that password-cracking tools can try tens of millions of combinations per second, that each added character makes a password an order of magnitude harder to brute-force, and that Firefox shows stored passwords in plain text unless a master password is set.

Why it matters: Reusing an email password on any other site means a breach at that site can hand an attacker your inbox, and a stored password list left in plain text on a machine gives anyone with physical access to it every credential at once.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related