{"id":4233,"date":"2019-02-01T11:22:41","date_gmt":"2019-02-01T15:22:41","guid":{"rendered":"https:\/\/solutionsreview.com\/identity-management\/?p=4233"},"modified":"2019-02-01T11:23:56","modified_gmt":"2019-02-01T15:23:56","slug":"experts-comment-on-national-change-your-password-day","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/","title":{"rendered":"Experts Comment on National Change Your Password Day"},"content":{"rendered":"

\"Experts<\/p>\n

Today is National Change Your Password Day!<\/span><\/p>\n

Preparing for National Change Your Password Day, we\u2019ve written<\/a> extensively<\/a> over the past week about the importance of password security. Your employees and their identities constitute the largest attack vector in your enterprise. How they handle their passwords forms the foundation of your business\u2019 identity security, even if you incorporate multifactor authentication.<\/span><\/p>\n

\t\t\t

\"Download<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div><\/p>\n

Breaches like Collection #1<\/a> and Collections #2-5<\/a> show the dangers of repeated or weak passwords. Therefore, your employees should take National Change Your Password Day as an invitation. For example, they should abandon their former passwords and embrace better identity security best practices. They should definitely move away from the weak passwords of the past. \u00a0<\/span><\/p>\n

What can enterprises learn from National Change Your Password Day? We spoke with identity management and privileged access management experts for their thoughts on password best practices: \u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n

Joseph Carson, Chief Security Scientist,<\/b> Thycotic<\/b><\/a><\/span>:<\/b><\/h3>\n

\u201cUsing a passphrase with a combination of complex characters such as \u2018$ymB0LS\u2019 drastically increases your security and protection of personal data. It\u2019ll take some time to upload your credentials into the password manager, but invest the time and use the password generator function to create complex, new passwords for your accounts. The passwords should be at least 16 characters long. As you update all your accounts with the new passwords, set up two-factor authentication on all supported accounts that protect sensitive information.\u201d<\/span><\/p>\n

\u201cLength matters most. Complexity is important but the size of your password matters more. Most sites and applications set a minimum requirement of 8 characters for your password.\u201d<\/span><\/p>\n

\u201cPlease don\u2019t ever share your passwords with anyone, not even your significant other. While it may seem harmless, sharing your password with a loved one drastically decreases the security of your account. It\u2019s just not worth the risk.\u201d<\/span><\/p>\n

Chris Morales, Head of Security Analytics,<\/b> Vectra<\/b><\/a><\/span>:<\/b><\/h3>\n

\u201cThere is a long-running myth that complex phrases using characters, numbers, and letters is secure. They are not. These are simply hard-to-remember phrases that are quickly forgotten and reused in multiple locations. Even worse, many sites offer easy-to-remember questions with information like mother\u2019s maiden name or favorite pets names to reset a password. This is the kind of information that could be easily obtained using social media.\u201d<\/span><\/p>\n

\u201cThere are a few key considerations we can extract from the above.<\/span><\/p>\n

    \n
  1. Simple phrases make better passwords than complex sets of characters because it is the length, and not the complexity, that matters. \u201cThe quick red fox jumped over the lazy brown dog\u201d is a much stronger and infinitely easier to remember password than \u201c1W33$^Adgfi*()tyu\u201d<\/span><\/li>\n
  2. Sharing passwords in too many sites leads to grief when a simple Netflix account leads to compromise of a bank account login. I actually don\u2019t think a unique password for every single site is realistic, but using a grouping of passwords based on the type of site does work. Sharing passwords between Netflix and Hulu is ok. Sharing passwords between PayPal, your bank account and Netflix is bad.<\/span><\/li>\n
  3. Don\u2019t answer simple questions like mother\u2019s maiden name and favorite color with real easy to guess answers that anyone can figure out by reading social media. I answer these type of questions with completely unrelated answers that only I know.<\/span><\/li>\n
  4. Even after following all these practices, the reality is\u2014passwords suck. They are easy to steal and ultimately every password can be cracked with enough time and computing power. The industry needs to move away from simple passwords and focus on more complex authentication that includes something you know, something you have, and who you are. I think the most important rule is to use multi-factor anywhere and everywhere you can. By combining biometrics with a second device along with a password, you raise your chances of being safe even when the password is compromised.\u201d<\/span><\/li>\n<\/ol>\n

    Shahrokh Shahidzadeh, CEO,<\/b> Acceptto<\/span><\/b><\/a>:<\/b><\/h3>\n

    \u201cAddictions can be attached to pretty much anything and everything. From alcohol and drugs to food and gambling. South Korean even had to create a law that treats game addiction like drugs and alcohol. However, there is an addiction that affects billions of people daily and it doesn\u2019t seem to be acknowledged: the addiction to passwords.\u201d<\/span><\/p>\n

    \u201cDependencies usually start out as something necessary, but they grow into monsters over time. Just like any addiction, it seems that time just keeps flying by and every excuse we can come up with stops us from breaking the cycle. It\u2019s always easier to keep doing the same thing and expecting a different result. Our dependency on passwords is no different.\u201d <\/span><\/p>\n

    \u201cIt\u2019s time to take the first steps to break our password addiction. In 12-step programs the first step is to acknowledge the problem, then you are ready to work on the solution. Acknowledging that passwords truly have outlived their effectiveness gives you the freedom to evaluate new AIML-based technologies.\u201d<\/span><\/p>\n

    Thanks to the experts for their time and expertise on National Change Your Password Day!<\/b><\/p>\n


    Widget not in any sidebars
    <\/p>\n","protected":false},"excerpt":{"rendered":"

    Today is National Change Your Password Day! Preparing for National Change Your Password Day, we\u2019ve written extensively over the past week about the importance of password security. Your employees and their identities constitute the largest attack vector in your enterprise. How they handle their passwords forms the foundation of your business\u2019 identity security, even if […]<\/p>\n","protected":false},"author":41,"featured_media":2359,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5],"tags":[1031,142,125,1028,1029,16,112,76,70,145,1027,124,91,123,90,89,1030],"acf":[],"yoast_head":"\nExperts Comment on National Change Your Password Day<\/title>\n<meta name=\"description\" content=\"What can enterprises learn from National Change Your Password Day? We spoke with identity management and privileged access management experts.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Ben Canner\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/\",\"name\":\"Experts Comment on National Change Your Password Day\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg\",\"datePublished\":\"2019-02-01T15:22:41+00:00\",\"dateModified\":\"2019-02-01T15:23:56+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\"},\"description\":\"What can enterprises learn from National Change Your Password Day? We spoke with identity management and privileged access management experts.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg\",\"width\":800,\"height\":400,\"caption\":\"Experts Comment on National Change Your Password Day\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/identity-management\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Experts Comment on National Change Your Password Day\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#website\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/\",\"name\":\"Identity and Access Management Solutions | Solutions Review\",\"description\":\"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541\",\"name\":\"Ben Canner\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g\",\"caption\":\"Ben Canner\"},\"description\":\"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.\",\"url\":\"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Experts Comment on National Change Your Password Day","description":"What can enterprises learn from National Change Your Password Day? We spoke with identity management and privileged access management experts.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/","twitter_misc":{"Written by":"Ben Canner","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/","url":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/","name":"Experts Comment on National Change Your Password Day","isPartOf":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg","datePublished":"2019-02-01T15:22:41+00:00","dateModified":"2019-02-01T15:23:56+00:00","author":{"@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541"},"description":"What can enterprises learn from National Change Your Password Day? We spoke with identity management and privileged access management experts.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#primaryimage","url":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg","contentUrl":"https:\/\/solutionsreview.com\/identity-management\/files\/2018\/02\/password-2-mod.jpg","width":800,"height":400,"caption":"Experts Comment on National Change Your Password Day"},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/identity-management\/experts-comment-on-national-change-your-password-day\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/identity-management\/"},{"@type":"ListItem","position":2,"name":"Experts Comment on National Change Your Password Day"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/identity-management\/#website","url":"https:\/\/solutionsreview.com\/identity-management\/","name":"Identity and Access Management Solutions | Solutions Review","description":"Evaluating Enterprise IAM Software, Identity Governance & Access Control Tools.","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/identity-management\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/357f925262827fcf840b4341920a1541","name":"Ben Canner","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/identity-management\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/63f68345052a446ce0cc9c802dd3f373?s=96&d=mm&r=g","caption":"Ben Canner"},"description":"Ben Canner is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in English from Clark University in Worcester, MA. He previously worked as a corporate blogger and ghost writer. You can reach him via Twitter and LinkedIn.","url":"https:\/\/solutionsreview.com\/identity-management\/author\/bcanner\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4233"}],"collection":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/users\/41"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/comments?post=4233"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/posts\/4233\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media\/2359"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/media?parent=4233"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/categories?post=4233"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/identity-management\/wp-json\/wp\/v2\/tags?post=4233"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}