Passwords are evil and expensive
Some interesting facts about people's use of passwords have emerged from a survey of over 3,000 IT professionals and business execs carried out in the US.
Just under a quarter have eight or more different names and passwords to access different parts of their computer system. Eighteen per cent are lucky enough to have just one, with most stuck with between three and four.
With this many to remember, you'd think some people would write them down. They do. Over half (55 per cent) of people have written their password down at least once, with most having written them down about three times. Nine percent of people always write their passwords down.
But clued-up companies are fighting back against possible security breaches. Just under a quarter of companies insist passwords are changed seven times a year or more. And just over a quarter three to four times a year.
That's not all. Over half of all companies insist employees use a combination of letters and numbers in their password to make a potential hacker's job harder. And 37 per cent insist on passwords of eight characters or more for the same reason.
[ Read more ]
- Article: How to Use Passwords Securely (22 April 2003)
- Article: Implementing Basic Security Measures (14 April 2003)
- Article: Cracking OpenVMS Passwords with John the Ripper (28 November 2002)
- Article: What makes a good Password? (13 November 2002)
- Article: A Note on Proactive Password Checking (24 September 2002)
- Article: Basic security with passwords (24 May 2002)
- Article: Passwords - The Weak Link (1 April 2002)
By subscribing to our early morning news update, you will receive a daily digest of the latest security news published on Help Net Security.
With over 500 issues so far, reading our newsletter every Monday morning will keep you up-to-date with security risks out there.