{"id":287,"date":"2017-10-09T10:07:29","date_gmt":"2017-10-09T00:07:29","guid":{"rendered":"http:\/\/www.smevidence.com.au\/?p=287"},"modified":"2024-03-01T08:53:47","modified_gmt":"2024-02-29T22:53:47","slug":"30disc-day-1-installing-operating-system-and-application-updates-2-2-2-2-2","status":"publish","type":"post","link":"https:\/\/www.smevidence.com.au\/website\/?p=287","title":{"rendered":"30DISC &#8211; Day 7 &#8211; Install a Password Manager"},"content":{"rendered":"<p>Weekend over, let&#8217;s get back into it!<\/p>\n<p>Today&#8217;s challenge &#8211; Install a Password Manager &#8211;\u00a0<a href=\"https:\/\/blog.yourultimatesecurity.guide\/2016\/03\/3dsc-day-7-install-a-password-manager\/\" target=\"_blank\" rel=\"noopener\">Direct Link to Guide Page<\/a><\/p>\n<p>System passwords are best when they long, complex, unique and recent. Whilst that sounds like a good list for a relationship, let&#8217;s keep the focus on passwords shall we.<\/p>\n<p>The two primary elements of strong password are length and complexity.<\/p>\n<p>Length: the longer a password is, the harder it is to crack. Think of it this way: if you password was only a single number, it would take a maximum of 10 guesses to get it right. If we then made your password two numbers, the difficulty increases by an order of magnitude: it would take a maximum of 100 guesses to get it right. The longer, the stronger.<\/p>\n<p>Complex: Let&#8217;s extend the above example, if your password was only a single character but could be a number, letter or special character (think a !,$,# etc), instead of a maximum of 10 guesses, it would take a maximum of 94 guesses. Extend that to password to two characters, and now you&#8217;re up to 8,836. The more complex, the stronger.<\/p>\n<p>So how long and how complex a password should you have? Ideally, as long as you are permitted. If a password can be 100 characters long, then make it 100 characters long. How the hell would you remember a password that long? That&#8217;s were today&#8217;s challenge comes in. But more on that in a moment.<\/p>\n<p>Whilst it&#8217;s all well and good to have a 100 character complex password, if you haven&#8217;t changed it in 3 years, or have used the same password across multiple accounts, then you&#8217;re setting yourself up for a big fall. It only takes a compromise of one of those systems to render your password useless, and open you up to attack across numerous other systems. Regularly changing your password (at a minimum every three months) and following a policy of &#8220;one account, one password&#8221; significantly increases your protection from hackers trying to steal your password and breaking into your accounts.<\/p>\n<p>How does that work? Well take a look at this little beauty:<\/p>\n<p><img decoding=\"async\" src=\"https:\/\/sagitta.pw\/hardware\/gpu-compute-nodes\/brutalis\/brutalis_rear_thumb.png\" \/><\/p>\n<p>That is a password cracking computer &#8211; it&#8217;s sole purpose is to break encryption and uncover your password. How good is it? Well for the encryption used by many banks, it can try 300,000 passwords per second. (<a href=\"https:\/\/sagitta.pw\/hardware\/gpu-compute-nodes\/brutalis\/\" target=\"_blank\" rel=\"noopener\">Photo Source<\/a>\u00a0<a href=\"https:\/\/gist.github.com\/epixoip\/ace60d09981be09544fdd35005051505\" target=\"_blank\" rel=\"noopener\">Data Source<\/a>) So yeah, your 6 digit password isn&#8217;t going to stand much of a chance. So how do we secure ourselves online?<\/p>\n<p>Use long, complex passwords that we change regularly that are unique to each account. How do you manage all of those passwords then? By using a password manager! Various options exist in the marketplace with different functions, from open source options like <a href=\"https:\/\/keepass.info\/\" target=\"_blank\" rel=\"noopener\">Keepass<\/a>, commercial options like\u00a0<a href=\"http:\/\/www.iliumsoft.com\/ewallet\" target=\"_blank\" rel=\"noopener\">eWallet<\/a>, or hybrid online\/offline solutions like <a href=\"https:\/\/www.lastpass.com\/\" target=\"_blank\" rel=\"noopener\">LastPass<\/a>. You&#8217;ll need to decide what works best for you, but if you haven&#8217;t already got a password manager, I&#8217;d suggest trying LastPass, it&#8217;s a good compromise between ease of use and security (and Justin, the creator of the 30DISC, whilst not using it himself, says that it&#8217;s ok, and that&#8217;s good enough for me.<\/p>\n<p>Geoffrey:\u00a0I&#8217;ve been using a password manager now for about 15 years (when I got my first PDA). I don&#8217;t have time to move everything over to LastPass right now, but I think I will do that in the future, particularly so I can also manage my wife&#8217;s passwords in a single management account.<\/p>\n<p>Juan, Diana and Priscilla: All three were sans-password manager, so we set them all up on LastPass. Diana really took to it, Juan will take some work I think. Priscilla still isn&#8217;t accepting that she can&#8217;t use the same 6 character password she&#8217;s been using since about 2004. She&#8217;s not very happy right now.<\/p>\n<p>&nbsp;<\/p>\n<p>Previous Days Here:<br \/>\n<a href=\"http:\/\/www.smevidence.com.au\/?p=266\" target=\"_blank\" rel=\"noopener\">Day 0 &#8211; Introduction to the Team<\/a><br \/>\n<a href=\"http:\/\/www.smevidence.com.au\/?p=269\" target=\"_blank\" rel=\"noopener\">Day 1 &#8211;\u00a0Installing Operating System and Application Updates<br \/>\n<\/a><a href=\"http:\/\/www.smevidence.com.au\/?p=274\" target=\"_blank\" rel=\"noopener\">Day 2 &#8211;\u00a0Set Up A Standard User Account<\/a><br \/>\n<a href=\"http:\/\/www.smevidence.com.au\/?p=277\" target=\"_blank\" rel=\"noopener\">Day 3 \u2013 Review Privacy Settings<\/a><br \/>\n<a href=\"http:\/\/www.smevidence.com.au\/?p=281\" target=\"_blank\" rel=\"noopener\">Day 4 &#8211;\u00a0Setup Private &amp; Secure Email<br \/>\n<\/a><a href=\"http:\/\/www.smevidence.com.au\/?p=284\" target=\"_blank\" rel=\"noopener\">Days 5&amp;6 \u2013 Weekend Project #1<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Weekend over, let&#8217;s get back into it! Today&#8217;s challenge &#8211; Install a Password Manager &#8211;\u00a0Direct Link to Guide Page System passwords are best when they long, complex, unique and recent. Whilst that sounds like a good list for a relationship, let&#8217;s keep the focus on passwords shall we. The two primary elements of strong password [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":267,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"_links":{"self":[{"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/posts\/287"}],"collection":[{"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=287"}],"version-history":[{"count":3,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/posts\/287\/revisions"}],"predecessor-version":[{"id":290,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/posts\/287\/revisions\/290"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=\/wp\/v2\/media\/267"}],"wp:attachment":[{"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=287"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=287"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.smevidence.com.au\/website\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=287"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}