With the multiplication of computer systems, passwords have spread out both in our personal and professional lives. And the protection of credential passwords has become a major concern not only for organizations but also for society. And no wonder why those credentials are called the “keys to the kingdom”: privileged credentials allow the execution of critical actions, such as modifying settings of a domain controller or transferring funds from a bank account.
With the multiplication of credentials, people tend to create passwords based on their personal information. Or even worst, they use a common combination of characters, for easy memorization. According to a Nordpass study, the most common passwords are “123456”, “qwerty” and “password”. Other common combinations include birth dates, their own names, car brands and sports teams. At the same time, many people communicate passwords through insecure means, such as work messaging channels they trust, post-its and notebooks. That way, sensitive information is transmitted in a plain text, without any security mechanism.
It is important to keep in mind that using personal data on passwords makes it easier for attackers to discover passwords using social engineering techniques. If a malicious attacker can gain access to a platform and service a single employee uses, that attacker can often move laterally through the organization simply by trying known passwords out. Furthermore, if users store password on insecure ways, like post-it or unprotected spreadsheets, malicious attackers have more chances to obtain unauthorized access to passwords.
To avoid password leaking or storage on physical ways, like note pads, and to reduce cybersecurity risks related to password management, senhasegura has developed MySafe, our exclusive personal vault solution. senhasegura MySafe helps users store and share their data in a few clicks without any risk.
Enjoy this Cyber Notes Cast episode!