Suppose I forget it? That inner voice screams, "Use that one password you always remember!" But no, I resist the temptation, because that's not smart - if that password ever leaks out, hackers will get instant access to all my accounts. Then just hope there is MFA (Multi-Factor Authentication) set up. And yes, the longer the password, the better, so it always takes me some time to come up with a good one.
Let me let you in on a secret: long ago, during a research project, I once got access to a password file. In other words, I could see all the passwords! A giant security flaw, of course, but it was fascinating nonetheless. What struck me most was how often passwords were about food and drink, and my vocabulary spontaneously expanded with the funniest and sometimes dirty words. Thankfully, those days of weak password files are over. But even I, as a CISO, still face the same challenge: coming up with a new password. And yes, of course: I succeeded, and no, I'm not going to give it away. But it's long, I haven't used it before, and it reminds me of something that happened to me on my first day here at VU Amsterdam.
February 1st is Change Your Password Day. Will you join in?
You probably already have a password for your VU account. If it's a long, personal password that you can remember well, you may not need to change anything. But please take a moment to check that your password hasn't already fallen into the wrong hands via HaveIBeenPwned.com. Do you still feel a little uneasy after that check? Then I invite you to join me and change your password.
Everyone contributes to stronger security
By participating in Change Your Password Day and reflecting on your password use, together we take an important step towards stronger cyber security, and thus your (personal) data is safer!
Password Checkup
Easily find out which of your accounts are no longer secure via a Password Checkup.
- Via the 'Have I Been Pwned' website you can see if your email is in a data breach
- on your iPhone you can go to Settings → Passwords → Security Recommendations
- Google/android has a Password Checkup for this: https://passwords.google.com/
Password Tips & Tricks
- Remembering different passwords is tricky, a password manager like LastPass or 1Pass makes this easier because you only need to remember one 'master password'. In addition, the IT department is in the process of providing a password manager for all VU users.
- Make it long: Use a password of at least 12 characters. Combine uppercase and lowercase letters, numbers and symbols to make the password more complex.
- Don't use personal information: Avoid using information such as your name, date of birth or address in your password.
- Use unique passwords for each account: This will prevent that if one of your passwords is stolen, all other accounts will also be compromised.
Share this message with your colleagues, friends and family. Together, let's protect our data from cyber threats. That way we start February safe and on to a safe Valentine's Day!
With cyber-safe regards,
Your new (a.i.) Chief Information Security Officer
Irma Meinema
Infosec.is.it@vu.nl