Passwords

Passwords

1. Policy

   • Organisations that take data security seriously typically have a comprehensive password policy that they ask their employees to follow.
   • The organizations software and system settings should support this policy.
   • The policy typically covers both the protection and creation of passwords.

2. Creating Passwords

   • Complexity is increased by: greater length of passwords, combination of upper and lower case letters, numbers, symbols
   • Should NOT use words found in the dictionary, familiar names or be easy to crack.

3. Protection

   • Default passwords should be quickly changed because they are easy to crack and simple
   • Passwords should be regularly changed like every 3 months
   • Passwords should never be written down.
   • Passwords should never be shared with anyone.