I already discussed using an automated device to store your passwords. While that is a good idea, many people do not have access to that at work or maybe even at home. While you need to find a way to remember your passwords, you have to be careful how you go about it.

If you want your passwords to be safe, you will not write them down. I know that sounds extreme, but there is a reason that most business and government agencies forbid their employees from writing down passwords. While cracking a password electronically can be time consuming and sometimes impossible, finding a password written down can be incredibly easy. It does not matter how great of a password you have chosen, if an intruder finds it, they will get into your account.

This means no sticky notes on the side of your monitor, no scraps of paper under your keyboard, no list in the back of your notebook or the front of your paper address book (why are you still using that thing anyway!?) and no list laying in your top desk drawer. Go ahead; go throw away those items. I will wait here... OK, are they shredded? Good. You've just eliminated the biggest hole in any security plan.

To avoid allowing your password to be leaked out, you should also be careful when entering it. Even though it will be obscured on the screen, make sure that you don't allow anyone to watch your fingers too closely. It is always possible that they will catch enough of your password to figure out the rest. (Another good reason to make your password hard to guess.)

Changing your password frequently will also keep it safe. You should change most passwords at least once a month. This will minimize the damage if your password is compromised without your knowledge. Some employers (such as certain federal agencies) even require their staff to change their passwords as often as daily.

Finally, just use common sense. Everything I said today is pretty logical when you think about it. So before you do anything with your password, stop and think, "Could someone other than me use my actions to gain access to my password?"

DISCLAIMER
While every attempt has been made to assure all information in this document is accurate, the author assumes no responsibility or liability for any damage or undesired effects resulting from the use of this information. Configurations are different on every computer and results may vary.

This document is copyright 2005 Michael Gatti. No portions may be reproduced or distributed without the express written consent of Michael Gatti.

<< PREVIOUS PAGE | RETURN TO MICHAEL'S GUIDE