Did you now that in 2020 the most common password was still 123456? That to me, seems unbelievable, but it’s true! According to ID Agent, the leading provider of Dark Web monitoring, the top 20 passwords of 2020 were:
- 123456
- password
- 12345678
- 12341234
- 1asdasdasdasd
- Qwerty123
- Password1
- 123456789
- Qwerty1
- :12345678secret
- Abc123
- 111111
- stratfor
- lemonfish
- sunshine
- 123123123
- 1234567890
- Password123
- 123123
- 1234567
We are now using the internet more than ever, from email to banking and still the most used passwords can be guessed within seconds. This scares me and it should also scare you! If you are one of the guilty ones, or you know someone who is, please take a few minutes to read through how you can improve your security online.
- You guessed it. Use strong passwords
The National Cyber Security Centre now advise to try to use 3 random words as a good way to create a strong, unique password that you will remember.
Numbers and symbols can still be used if needed, for example 3redhousemonkeys27!
- Protect your email by using a strong, separate password to everything else
A recent Google survey shows that 65% of people reuse their passwords on multiple sites.
Think of it this way, your email password could be the master key to every door. Once a Cyber Criminal has this password, they can potentially access any other site that you have an account with. They can also access any sensitive data you hold within that mailbox.
- Look into using a password manager
A password manager is a program that allows users to store, generate, and manage passwords for local applications and online services. This can be accessed with one (strong) master password and you and only you have access to the encrypted database. This can help you by only needing to remember the one strong master password.
LSA is pleased to announce our partnership with Keeper, a password manager program for you and your staff. To find out more please contact us.
- Use Multi Factor Authentication if it is available!
It may seem complicated at first but in fact, it is really simple.
2 Factor Authentication enables you to receive a text or prompt to your mobile device to accept the login. So, for example, if someone attempts to login, they will require your device to continue the login process.
Today, many online systems have 2 Factor Authentication available to use with free to download apps like, like Microsoft Authenticator or Authy. There are also Multi Factor Authentication Apps like WatchGuard Authpoint, that takes it a step further and looks at mobile DNA to check that the device has not been cloned. These are the recommended routes to take, but if you have to, you can use SMS codes as an option but only a last resort as these have also been known to be open to compromise.
- Check to see if your password or Personal Identifiable information is available on the Dark Web
In 2019, around 65% of breaches resulted in passwords being leaked. LSA’s partnership with ID Agent enables proactive Dark Web monitoring of your domain, to identify if any of your passwords or PII is being sold on the Dark Web. Please contact us for a free complimentary scan of your domain to find out more.
Finally, If you would like to discuss any of the points further or would like to see how LSA Systems can help improve your security, please get in touch.
Sources
https://services.google.com/fh/files/blogs/google_security_infographic.pdf