Password
You can hardly exist on the net these days without a secret combination of letters and numbers that acts as a gatekeeper into your online presence. We all have them. We have them for our email, our bank, our Netflix account, our doctor, car insurance, cable tv account, phone… and on and on. We have passwords that, in theory, protect our privacy and secure our private information from “those that would seek to abuse us”.
But lately, I have begun to feel a little overwhelmed mentally when it comes to my passwords. Like most people, I have a set of passwords that I use, because having just ONE password is pretty dangerous should that single password be compromised somehow. And some are more “secure” than others, for example the ones I use for my bank, are NOT going to be the same ones that I use to log into World of Warcraft or my Gmail account. But as I age, I find that my memory just isn’t what it used to be. And to make matters worse, more and more of my life is either digital, or literally on the net. I do everything there, whether it’s paying bills, or just staying on top of the latest news headlines, everything requires a login and password. And that wouldn’t be so bad, accept that I have to remember them all, and they are almost all different.
“That’s good!” you say. ”It’s secure!” Well, yes and no. You see, at some point, your brain (or at least MY brain) just can’t keep that much exact information at the ready. I have a hard enough time remembering a few phone numbers any more, let alone the login name and password for three dozen different websites. And to make matters worse, companies, who are increasingly getting sued over breaches in security, are implementing more and more strict rules regarding what exactly you can use as a login name or password. In some cases it’s getting downright ridiculous.
Take Gmail for example. This is my “not so secure” email address. Sure, I want it to be private, but it’s the one I give out to those sites that “require” a valid email address, but aren’t trustworthy enough to get my more private one linked to my private domain. No way. And in the past, I have used one of my generic passwords and it’s been fine. But suddenly, gmail decided that I wasn’t secure enough and basically made it a requirement that I change my password. My old one was six characters long, which was actually more than some of my passwords which were only five. Google wanted at least eight.
Frak. This is like another whole phone number to remember. But, it’s made with letters, so I can find a way to remember it easier, right… NO, you can’t use anything from a list of known words. Okay… NO, it has to have at least 2 numbers as well. Okay then… NO, you can’t have any running strings of numbers or letters (1234… ABCD). Well how about… NO, it can’t contain any portion of your previous password. “Would you like us to generate one for you?”…. Yes…
Q7g6H3k#D7*21H
Ah, yes. Much easier to remember.
I exaggerate, but not by much. On most sites, the new “minimum length” is six characters, and most of the rules mentioned above are real. It gets so bad that we start considering writing them down somewhere… which any security guy will tell you in a deep and stern voice that you must NEVER EVER DO. And they would be right of course. But what choice do we have? The rules to make passwords more secure are purposely designed to make them hard to guess. Unfortunately, those same rules make them equally hard to remember. And here’s the thing, having a secure password no more safeguards your personal information than a weak one if your computer is already compromised. Yup, all those viruses you’ve been fighting… Many of them are there to do nothing more than harvest your password, even if it’s, “Q7g6H3k#D7*21H”. And frankly, if someone is seriously out to hack your bank account or hijack your identity, there are far far easier methods than brute-force cracking your password. It’s a lot more likely they would just start by rifling through your trash. Then it’s just a matter of doing a little social engineering to take over your life.
And it’s happened to all of us… you forget one. No matter how hard you try, you just can’t seem to log on to a certain account and you finally relent and hit the “I forgot my password” link. And you go through the process of either an email reset (provided it’s not your email password you have forgotten) or you answer the dreaded “personal question”. These are those special questions that only you are supposed to know. Things like, “what is your favorite sports team?”… the answer to which is probably plastered all over the back of your car, or known by a mere 50 of your closest friends. I really hate these questions because, for whatever twisted reason, I just don’t hold on to the kind of information that most people do I guess. For example, as one of your question choices, they might have, “What is your favorite rock band?” Would that be now, at this very moment, or two years ago when I set up my account? Or how about, “What was the name of your first pet?” Okay… “Mac” I enter. “Sorry, your answer must be five characters in length or more.” GAH!! Pet names are short! “Sid, Spot, Rex”, etc… What dunderhead is writing these filters?! And is it any more secure for a potential thief to guess my pet’s name (which could very easily be found in five minutes on Google) than to hack my actual password?
It’s maddening, and frankly only going to get worse as more and more of our lives are done online. Someone needs to seriously come up with a better way of securing our data… like maybe an individualized global number that every person has invisibly tattooed on their right hand or forehead… I’M KIDDING!… kinda…