![\"Globe-DIY-231x300\"](\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2012\/05\/Globe-DIY-231x300.jpg\")
Recently, a friend of mine told me that her password had been stolen. A person got a hold of her password and had accessed her bank, email, and Apple accounts, as well as a few others with her personal information. She immediately took all the right steps; she changed her credit card numbers, informed the correct departments and talked to the right people. Afterwards, her biggest question was, \u201cWhat can I do to stop this from happening again?\u201d<\/p>\n
What had happened to her, like so many other people, is that when one of her passwords was compromised it was used to access a slew of other accounts that used the exact password. Unlike people using simple or default passwords like \u201cpassword\u201d or \u201c123456\u201d (it\u2019s far more common than you think), she had a strong, 14 character password that was virtually impossible to guess using a trial and error method. Her mistake was using this same password on multiple sites<\/strong>, something I am sure we all have fallen victim to at some point in our online lives.<\/p>\n Very recently there was an exploit discovered in a protocol that is used to encrypt our passwords every time we log into a site.\u00a0Its name is \u2018Heartbleed\u2019 and to make a long story short, it makes it very easy to listen in on a vulnerable site and pull random pieces of information from it, some of which contain the full username and password of users. When it was found, approximately 66% of the Internet used this protocol<\/strong>, leaving an incredible number of people open to this random attack. Within days, the majority of the sites affected had patched or were in the process of patching their servers, but the bug had existed for nearly two years prior to this discovery, making it impossible to quantify the number of people affected or passwords compromised. Every site had one thing to say to their users, \u201cChange your password.\u201d<\/p>\n Think of all the physical keys you have in your life. There is your car key, house key, the key that gets you into work and probably an array of others to give you access to different areas of your life. They are each different, and while a big ring of keys may annoy us at times, it exists for a reason, to isolate the damage someone could do if they found one of them. This is the exact train of thought that must be extended to passwords; each one must be unique and is used to isolate the damage one can do<\/strong> if they get ahold of it.<\/p>\n One solution that has gained more and more coverage over the past year is a password manager. Essentially this is a piece of software that keeps track of your unique passwords and you just have a single master password to log into any site. While this does solve the problem of having unique passwords without having to remember all of them, it requires you to be at your computer or on a device that supports it<\/strong>. For me, I want to be able to log in to my Gmail from a friend\u2019s house, or check my balance from any device, without having to rely on being near my password manager.<\/p>\n I told my friend exactly what I do. \u201cChoose a strong password that you can remember, then take the first three letters of each website and use them as either a prefix or suffix to your password, thus creating a unique password for each site you visit with a single password.\u201d<\/p>\n For example, if your password is abc123**# and you are logging on to Gmail, the password becomes \u201cGMAabc123**#\u201d, while your Apple password becomes \u201cAPPabc123**#\u201d.<\/p>\n This method has worked extremely well for me. It allows me to have a unique password for every website<\/strong>, without having to rely on a long list or being tethered to a password manager. It\u2019s a small effort in the beginning to change every password over, but it keeps my information protected.<\/p>\n What methods do you employ to keep your accounts safe?<\/strong> Let us know in the comments section.<\/p>\n","protected":false},"excerpt":{"rendered":" Recently, a friend of mine told me that her password had been stolen. A person got a hold of her password and had accessed her bank, email, and Apple accounts, as well as a few others with her personal information. She immediately took all the right steps; she changed her credit card numbers, informed the […]<\/p>\n","protected":false},"author":46,"featured_media":13844,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"spay_email":"","footnotes":""},"categories":[4],"class_list":["post-24157","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-tips"],"yoast_head":"\nRecent history has shown our weakness<\/b><\/h2>\n
Passwords are the keys to everything<\/b><\/h2>\n
What can be done?<\/b><\/h2>\n
Finally, Password Freedom<\/b><\/h2>\n