Data Privacy Day 2013 - Passwords

By Cynthia J. Larose

Something everyone can do for Data Privacy Day:  make it a point to change at least one password and make it "long and strong."

 

Here are some tips for building strong passwords from David Sherry, Chief Information Security Officer at Brown University:

To create a strong password, you should use a string of text that mixes numbers, letters that are both lowercase and uppercase, and special characters. Best practice says it should be eight characters, but the more the better. The characters should be random, and not follow from words, alphabetically, or from your keyboard layout.

So how do you make such a password?

Spell something backwards. Example: Turn "New York" into “ kroywen ”

Use “l33t speak”: Substitute numbers for certain letters.  Example: Turn "kroywen" into kr0yw3n

Randomly throw in some capital letters.  Example: Turn "kr0yw3n" into Kr0yW3n

Don't forget the special character.  Example: Turn "Kr0yW3n" into       !Kr0y-W3n$

 

So, you say you can't remember "complex" passwords...

One suggestion: create one, very strong, password and “append” it with an identifier:

!Kr0y-W3n$Bro

!Kr0y-W3n$Ama

!Kr0y-W3n$Boa

!Kr0y-W3n$Goo

!Kr0y-W3n$Yah

 

 

 

Subscribe To Viewpoints

Published

    • Viewpoint Topics

  • Privacy & Cybersecurity

    • Professionals

  • Cynthia J. Larose

    • Author

    Cynthia J. Larose

    Member / Co-Chair, Privacy & Cybersecurity Practice

    Cynthia J. Larose is Chair of the firm's Privacy & Cybersecurity Practice, a Certified Information Privacy Professional-US (CIPP-US), and a Certified Information Privacy Professional-Europe (CIPP-E). She works with clients in various industries to develop comprehensive information security programs on the front end, and provides timely counsel when it becomes necessary to respond to a data breach.