Best practice for password protection

In the digital age, protecting your credentials is more important than ever. Many cyberattacks begin with gaining initial access to an organization through compromised accounts. Let's safeguard our working environment by protecting our passwords.

Here are some critical points to remember for protecting your passwords:

Use Strong Passwords: Always use a password with enough complexity to prevent easy prediction. Here are some recommendations:

• Use a long length (e.g., 16 characters)
• Include a mix of uppercase and lowercase letters, numbers, and special characters
• Avoid dictionary words, common phrases, or simple patterns
• Never use personal information (e.g., birthday)

Use Unique Passwords for Different Accounts: You may consider that for each of your accounts have a unique password to prevent a ‘total loss from a single breach’ situation. To help manage your credentials, consider using reliable password manager software.

Regularly Update Passwords: It is a good practice to change your passwords periodically, such as every 3 to 6 months. Sometimes, attackers may break into an account for reconnaissance purposes without performing any noticeable actions, making it difficult to detect. Changing your password regularly can help protect your accounts from being compromised over time.

Avoid Sharing Passwords: Never share your passwords with anyone, including colleagues. If sharing is necessary in certain situations, be sure to change the password immediately after the operation is completed.

Be Aware of Phishing Attempts: Always stay alert when you need to provide your credentials. Especially when the login routine is unusual, such as clicking a link in an email that requires you to log in. Always verify the source before entering your credentials.

You can regularly check your passwords on platforms like 'Have I Been Pwned’ to ensure they haven't been compromised in recent data breaches.

If you need further information or assistance, please contact the IT HelpCentre (Tel: 2766 5900, WhatsApp / WeChat: 6577 9669) or reach out to us via the IT Online ServiceDesk.