Passwords

According to the 2016 Verizon Data Breach Investigation Report, 63% of confirmed breaches involved weak, default or stolen passwords.

Passwords are the single most important layer of defense you, as the user, can implement!

It is ESU policy to create passwords which:

  • Contain at least 10 characters

  • Include 3 out of the following character groups: lowercase letter, uppercase letter, number, special character

  • Are changed every 180 days

Additional tips:

  • Use sentences instead of words, also called passphrases. For example, think of song lyrics, what you like to eat etc.

  • Substitute other characters for letters, e.g. 3 = E, @ = a, $ = S etc. The more complex your password is, the stronger it is!

  • Use a unique password for each account so if one password is compromised, the damage is limited. At a minimum, separate your work and personal accounts and make a unique password for important accounts such as email, banking and health care.

  • Write down your password and store it in a safe place away from your computer.

Two-Factor Authentication

For an extra layer of security, you can enable two-factor authentication for your online accounts. Often times, the two factors consist of something you know and something you have. For example, your passphrase could be the first factor (something you know) but you might also be required to enter a one-time code sent to your cell-phone or use biometric features, such as a fingerprint, in addition as the second layer (something you have).