{"id":1391,"date":"2012-02-01T11:50:30","date_gmt":"2012-02-01T18:50:30","guid":{"rendered":"http:\/\/xmission.com\/blog\/?p=1391"},"modified":"2012-02-01T11:56:27","modified_gmt":"2012-02-01T18:56:27","slug":"today-is-change-your-password-day","status":"publish","type":"post","link":"https:\/\/xmission.com\/blog\/2012\/02\/01\/today-is-change-your-password-day","title":{"rendered":"Today is Change Your Password Day"},"content":{"rendered":"<p>One of the most common security problems XMission faces with our customers are insecure passwords. Today marks &#8220;Change Your Password Day&#8221;, pushed forward by a <a href=\"http:\/\/gizmodo.com\/5879669\/february-1-is-change-your-password-day-ive-decided\">writer at Gizmodo<\/a>. XMission supports this because it is not only important to have secure passwords for the services and websites you frequent on the Internet, it is equally important to change them with regularity. Especially the ones you frequently use. Here are some &#8220;pro tips&#8221; for keeping your passwords secure.<\/p>\n<ul>\n<li>Use a &#8220;password manager&#8221; that enables you to use a different password for every website you visit, but store them securely. My favorite is <a href=\"http:\/\/lastpass.com\">LastPass<\/a>. Although LastPass had a security issue last year, using a complex password for subsequent encryption of stored passwords overrides their data being compromised.<\/li>\n<li>Passwords should be a minimum of eight characters. The more characters you use, the harder it is to &#8220;brute force&#8221; crack your password. With processing power increasing, it has been possible in some cases to crack eight character passwords in short order by trying every possibility. The more characters you use, it gets exponentially harder to crack. A simple tactic to expand your password length is come up with a personal pattern for mixing words together, simply mixing words is not enough. So a bad password would be <em>&#8220;chesscheeseeagle&#8221;<\/em>, but this could be made into an excellent password with patterning <em>&#8220;^^^^chess444CHEESE801eagle###&#8221;<\/em>.<\/li>\n<li>Some say dictionary words should be avoided altogether, and a password manager can do a good job of coming up with completely random passwords. Using the mixed word strategy above should only be used for passwords you have to memorize. A random password like <em>&#8220;NmX5WCpPQwjRpuyUIjm86R4T&#8221;<\/em> is vastly more secure than one using words, but for those of us who lack superhuman memory, patterned words are easier.<\/li>\n<li>Two step verification like what <a href=\"https:\/\/www.paypal.com\/us\/cgi-bin\/?&amp;cmd=xpt\/Marketing_CommandDriven\/securitycenter\/PayPalSecurityKey-outside\">Paypal<\/a> and <a href=\"http:\/\/support.google.com\/accounts\/bin\/static.py?hl=en&amp;page=guide.cs&amp;guide=1056283\">Google<\/a> offer adds an additional layer of security upon well crafted passwords. Both of these services have smartphone &#8220;apps&#8221; which you can use to operate them.<\/li>\n<li>For system and website administrators, using an <a href=\"https:\/\/help.ubuntu.com\/community\/SSH\/OpenSSH\/Keys\">SSH Key<\/a> is far more secure than a password. All SSH capable shell and file transfer programs can handle keys instead of passwords. \u00a0Use them!<\/li>\n<li>Remember that XMission and most professional websites will not ask you for your password in email. Any request is most likely an attempt by someone to gain access to your account and information. Lack of awareness and &#8220;social engineering&#8221; is a very common security hole. People&#8217;s good faith and trust is often the weakest part of computer security. Be aware and verify before giving out any personal information or passwords.<\/li>\n<\/ul>\n<p>&nbsp;<\/p>\n<p>I hope these tips are helpful to keep your personal data secure and safe. Happy Change Your Password Day!<\/p>\n","protected":false},"excerpt":{"rendered":"<p>One of the most common security problems XMission faces with our customers are insecure passwords. Today marks &#8220;Change Your Password Day&#8221;, pushed forward by a writer at Gizmodo. XMission supports this because it is not only important to have secure passwords for the services and websites you frequent on the Internet, it is equally important [&hellip;]<\/p>\n","protected":false},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[130,5],"tags":[145,147,146,42],"class_list":["post-1391","post","type-post","status-publish","format-standard","hentry","category-tech","category-tips-helpful-information","tag-passwords","tag-ssh","tag-tech-2","tag-tips"],"_links":{"self":[{"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/posts\/1391","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/comments?post=1391"}],"version-history":[{"count":10,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/posts\/1391\/revisions"}],"predecessor-version":[{"id":1400,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/posts\/1391\/revisions\/1400"}],"wp:attachment":[{"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/media?parent=1391"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/categories?post=1391"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/xmission.com\/blog\/wp-json\/wp\/v2\/tags?post=1391"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}