![\"How](\"https:\/\/solutionsreview.com\/identity-management\/files\/2019\/05\/Multifactor-authentication-mod.jpg\")
<\/p>\n<\/p>\n
How can your enterprise encourage good password habits among your employees? Why does that matter to your overall identity and access management<\/a>? How does it relate to your privileged access management (PAM)?\u00a0<\/span><\/p>\n Earlier this week, we covered the latest Annual Global Password Security Report from <\/span>LastPass by LogMeIn<\/span><\/a>. In that report, we learned about some of the obstacles employees face to good password habits:\u00a0<\/span><\/p>\n However, this report only skims the surface of the obstacles to good password habits for enterprise employees; in fact, the majority of obstacles stem from employees again. According to the Harris Poll, conducted with a Google partnership, found employees reuse one password an average of 13 times. Meanwhile, about two-thirds of employees repeat their passwords for a wide variety of sites.<\/span><\/p>\n Additionally, while 40 percent of employees experience a breach, only 37 percent use two-factor authentication. 34 percent change their passwords on a regular basis and over half say they won\u2019t bother to change their passwords in the aftermath of a breach.\u00a0<\/span><\/p>\n Worse, their passwords may not prove effective. The Harris Poll found 60 percent of people study say their birthday is a part of at least one password. SplashData found nearly 10 percent of users selected at least one of the 25 worst passwords.\u00a0\u00a0<\/span><\/p>\n However, enterprises don\u2019t always support good password habits. LastPass found only 36 percent of businesses enable policies of resetting their master passwords. Simultaneously, only 24 percent enforce strong master passwords requirements.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n What can your enterprise do<\/a>?\u00a0\u00a0<\/span><\/p>\n Even though employees feel overwhelmed by the number of passwords they must remember, you can\u2019t allow them to recycle passwords. Every reused password constitutes a potential vulnerability in your IT infrastructure and login portals. In fact, reused passwords have a higher chance of ending up in the Dark Web; thus, they could end up in the hands of hackers for password spraying attacks.\u00a0\u00a0\u00a0\u00a0<\/span><\/p>\n Instead, your enterprise should encourage employees to make strong, unique passwords for every account they use for their workflows. Fortunately, identity and access management capabilities can help with this:\u00a0<\/span><\/p>\n These securely save and sync your credentials, allowing them to become more complex without overwhelming employees. Password managers can generate, retrieve, and keep track of impossibly strong or complex credentials. Additionally, they can store the passwords in an encrypted database.\u00a0\u00a0<\/span><\/p>\n Often, password managers combine with password vaulting. Password vaulting encrypts passwords, allowing only one password to access all of them.\u00a0<\/span><\/p>\n One important thing to note about single sign-on; SSO does not mean the same thing as saving passwords in your browser or synchronizing devices. Instead, SSO acts as one capability and function of a next-generation identity and access management solution. Through SSO, a user logs in with a single username and password to access multiple systems. This enables them to only memorize a few sets of credentials, allowing them to improve their complexity and security.\u00a0 <\/span>\u00a0\u00a0<\/b><\/p>\n Ironically, the best way to encourage good password habits is to take some of the burdens off of passwords. Thankfully, you can supplement passwords with two-factor and multifactor authentication (MFA). Two-factor authentication adds another layer to your authentication procedure; for example, in addition to a password, you can ask employees to provide a hard token. In other cases, your enterprise can ask employees to respond to an SMS message to their mobile devices.\u00a0<\/span><\/p>\n MFA works in a similar manner, except adding new layers of authentication beyond the traditional two. These factors might include:\u00a0<\/span><\/p>\n Multifactor authentication subscribes to the principle of layered security; the more layers between the access request and database, the more secure it becomes.\u00a0<\/span><\/p>\n Of course, hackers can always bypass authentication security protocols with enough time and resources. However, most hackers won\u2019t bother; they would much rather target a low hanging fruit among enterprises. The stronger you make your cybersecurity, the fewer attacks you can expect (as ironic as that might feel).\u00a0<\/span><\/p>\n Multifactor authentication encourages good password habits by in some ways making passwords somewhat less critical to identity security.\u00a0<\/span><\/p>\n Few issues prove as toxic to good password habits and as ever-present among enterprises as password sharing. Indeed, good password habits are incompatible with password sharing. Further, password sharing can take many different forms.\u00a0<\/span><\/p>\n Sharing passwords can include writing passwords down on paper or sticky notes or informing colleagues of passwords to bypass security. The former sees employees share their passwords unintentionally, while the latter demonstrates far too much trust in their colleagues.\u00a0\u00a0<\/span><\/p>\n Sharing passwords can lead to an increase in insider threats, as it prevents full accountability or monitoring over your users. It allows those insider threats too much access, far beyond their normal capabilities.\u00a0<\/span><\/p>\n Thankfully, next-generation identity and access management solutions prevent a lot of password sharing; often, they need more than just passwords to receive access, making password sharing impossible.\u00a0<\/span><\/p>\n To learn more about how next-generation identity management encourages good password habits, check out our 2019 Buyer\u2019s Guide<\/a>. We cover the top solution providers in the market and their key capabilities. Also, we provide a Bottom Line Analysis on each vendor profile. Be sure to check it out here<\/a>, as well as our other resources.\u00a0<\/span><\/p>\n How can your enterprise encourage good password habits among your employees? Why does that matter to your overall identity and access management? How does it relate to your privileged access management (PAM)?\u00a0 Earlier this week, we covered the latest Annual Global Password Security Report from LastPass by LogMeIn. In that report, we learned about some […]<\/p>\n","protected":false},"author":41,"featured_media":4381,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[5,1],"tags":[142,125,16,1204,76,425,1242,1252,70,145,1206,339,461],"acf":[],"yoast_head":"\n\n
\t\t\t![\"Download](\"https:\/\/solutionsreview.com\/identity-management\/files\/2020\/01\/PAM_BG_SB_800.gif\" "\\"\\"")
<\/a><\/p>\n<\/div>\n\t\t<\/div><\/div>\nThe Top Good Password Habits for Enterprise Employees<\/b><\/h2>\n
1. Prevent Recycled Passwords\u00a0<\/b><\/h3>\n
Password Manager<\/b><\/h4>\n
Single Sign-On<\/b><\/h4>\n
2. Use Multifactor Authentication <\/b>
\n<\/b><\/h3>\n\n
3. Stop Password Sharing <\/b><\/h3>\n
How to Learn More<\/b><\/h3>\n
Widget not in any sidebars
<\/span><\/p>\n","protected":false},"excerpt":{"rendered":"