Think Strong Passwords and 2FA Will Keep You Safe?

As the cybersecurity industry changes, best practices change with it.

Microsoft is now warning that creating a strong password might not be enough to deter a hacker from gaining access to your account. There are many ways in which a bad actor can gain access to your information. Passwords can be found and stored from online databases, freely given though a suspicious website via social engineering, and even guessed correctly from the software a hacker may use.

Even though your password contains the recommended amount of numbers and is more than 8 characters long, it’s not enough to deter a determined individual. Employees at Microsoft defend against millions of password-based cyber attacks on a daily basis.

If you think that adding hashtags and special characters to your password will make it impenetrable, think again. The only real way to ensure safety in the digital world is to use biometric data, such as a fingerprint or facial identification, and even these have their limitations.

If you’re unable to use biometrics, making sure your password is changed often, using multiple passwords, and utilizing a password generator may beef up your security. Password management systems, like Passportal, are great for this kind of task.

Another note worth mentioning is that two-factor authentication (2FA) and multi-factor authentication (MFA) aren’t necessarily as secure as they claim to be, either. Using texting as a verification source isn’t secure, as SMS communication was designed without encryption. If your phone is switching on publicly access networks, it’s easier for your messages to be intercepted.

If you’re using a mobile device for authentication, we recommend using an app-based authenticator. Authy and Google Authenticator are good choices, although Authy has a bit more options, such as browser support, encrypted recovery backups and multiple device support.

No matter which protections you choose to utilize, cyber threats are a very real and constantly changing issue to tackle. Make sure not to become complacent when it comes to your online security.

If you’re looking to get more information about Managed Security Services, check out our sheet below. To contact SkyPort IT today, call 585-582-1600 or visit our contact page.
Who’s Got Your Data?

Written by Emily M.