Tips on Cybersecurity: Password Security

In this era of information explosion, almost all online activities, like online shopping, social media, e-banking, and e-mailing, require passwords. What on earth is the "good password"?

 

#Stolen Password#

 

In the first half of 2022, the email account of a faculty member was stolen by cybercriminals due to a weak password. The campus email system was hacked and sent out multiple emails with the ransomware link. As a result, some other faculty members clicked the link and their computers got infected, causing economic losses and negative public sentiment.

 

Based on the case above, password security concerns everyone, and should not be ignored. A weak password is like a paper door with weak protective capability. It's easy for "thieves" to break in for stealing.

If we set a simple password for convenience, it will be easy to be decoded. Therefore, it is very important to create a high-security password following the criteria below:

 

1. The password should be at least 8 characters long, and better to use over 10 characters. 

2. The composition of the password should be as complex as possible, including at least three types of uppercase letters, lowercase letters, numbers, and special characters. Please avoid using simple common passwords, such as "admin@123" or "1qaz!QAZ".

3. Never use the same password for all accounts. We should independently set the password for important and office ones.

4. Avoid using passwords simply consisting of names, phone numbers, birthdays, account names, food, celebrities, or locations.

5. Change the password frequently. It is recommended to change them for important and office accounts at least every six months.

6. Protect your account information. Do not tell others, write it down on the paper or keep it in an insecure place.

 

In conclusion, password security is an indispensable part of cybersecurity. Only by using complex and unique passwords, changing them regularly, and preventing unauthorized access can we effectively protect the security of personal information and assets.