I read this article on yahoo news about password security. The number one way hackers get into protected and highly confidential systems is not though technical exploit but though guessing the password. Most people forget to change the default password, which makes even easier to get into the system. Trustwave, a security service firm found that default password such as ‘Password1′ had about 2 million network vulnerability scans and 300 recent security breach investigations. Trustwave set an assortment of widely available password- cracking tools loose on 2.5 million passwords, and were able to break 200,000 of them (article). Verizon’s security report found a similar results, 29% of security breaches were a result of weak or guessable passwords.Verizon also found that attackers are often inside victims’ network for months and years before they’re discovered. Very few companies found out about the breach on their own, and more than 2/3 learned from external party such as law-enforcement agency (article). If your password is weak and guessable, the best way to make it secure is to make it longer. Add complexity to your password, refrain from using dictionary words. Attackers are using brute-force tools to break into systems. A 7 character password has 70 trillion possible combinations, 8 character has 6 quadrillion possibilities.
Is your password secure enough? If not, use the techniques to make it secure.