Tips for World Password Day

Today (4th May) marks World Password Day , a global initiative to raise awareness around password security. So here goes!

1. Use a password manager

 Everyone should use a password manager. They make it easy to securely create, save, and enter strong passwords everywhere. Don't try to self manage variations of the same password.

2. Use two-factor authentication where it is available

Okay, so you don't want to use a password manager and keep on using 'qwerty' as a password ? Fine, but at least use 2 factor authentication.

Two-factor authentication combines username and password (factor one) with a second level of verification, like a TXT code to your mobile or a 2FA code generator such as Google Authenticator (factor two)

3. Don’t reuse passwords

So passwords are still 'kind of' hard to crack. It takes some time to decrypt '8d969eef6ecad3c29a3a629280e686cf0c3f5d5a86aff3ca12020c923adc6c92' into '123456'. But the thing is; there are now huge lists available with hashes converted to plain text. So using different passwords minimises the potential impact should one of your passwords be discovered. (See 1)

4. Never disclose or share your credentials

Hackers are getting more and more sophisticated, but in our experience the same types of tricks that have been used for years by hackers are still the most effective – and that is social engineering.

In other words, tricking you into clicking on an infected link, revealing a user name and password or paying an invoice that looks like it has come from a legitimate source. 

5. Don't use L33T passwords

About Lumturio

Lumturio’s update manager for Drupal and WordPress' modules and cores continuously checks for new versions of you or your client’s websites CMS (including contributed modules and themes), and alerts you when updates are available.

Our dashboard indicates and/or notifies when new releases of modules, themes or core updates are available for download. Might prove to be really useful, wouldn't you say?