Introduction to Passwords

Passwords written down, cybersecurity.
Article reviewed and updated for 2024
Passwords are an essential part of our digital lives. We use them every day to access our email, bank accounts, social media, and more. But what exactly is a password? A password is a secret combination of letters, numbers, and symbols that acts as a digital key to gain access to an online account or application. Just like a physical key unlocks a door, a password unlocks access to your digital data and accounts.  Without the correct password, hackers and other unauthorized users are locked out from your private information. Passwords play a critical role in protecting your online accounts, messages, photos, and other sensitive data from being compromised. 
When you enter your password, it’s encrypted by the website or app and compared against the encrypted password stored in their database. If the two match, you’re granted access. This system allows you to securely access your accounts and information without companies having to store your actual password. The strength and complexity of your password has a direct correlation to how difficult it is for hackers to illegally access your accounts. Weak, simple passwords provide little security while complex, unique passwords can help keep hackers at bay.

Password Strength

When it comes to passwords, not all are created equal. There is a big difference between simple, easy to-guess passwords and complex, secure passwords. Simple passwords use common words, names, dates or number patterns that many people might use. Some examples are "password", "123456", "qwerty", or using your birthday or anniversary date. The problem is that these simple passwords are incredibly easy for hackers to figure out. By just using common words and number patterns, hackers can easily crack these passwords. In contrast, complex passwords are much harder to decipher. 
Nowadays, we're all accustomed to entering passwords online. It's crucial that you take the time to create a complex password that's difficult for hackers to crack. While it might seem like a pain to come up with a complex password, think of them as an insurance policy. A simple password offers minimal security and is easy for hackers to crack, while a complex password is like a deadbolt lock that can keep your personal information safe and secure. Therefore, it's essential that you always use unique and complex passwords to safeguard your digital life.

Simple Passwords

Passwords like "password123" or "john1965" are simple and provide almost no security. Using predictable words or dates that are commonly used allows hackers to easily guess and crack the password. They use programs that run through dictionaries of common words and dates to decipher simple passwords. Some other examples of easily guessed passwords are "letmein", "monkey", "iloveyou", or "starwars". Any password using familiar names, words, or dates is an easy target for hackers. 
The biggest issue with simple passwords is that they provide very little actual security. When a password contains only familiar words or number patterns, hackers can crack them in minutes or even seconds in some cases. Simple passwords are one of the biggest vulnerabilities threatening online accounts today. Any password using basic words, names, dates, or number patterns should be avoided to properly secure your online information and identity.

Complex Passwords 

In contrast, complex passwords are much harder to decipher. Complex passwords use a combination of uppercase and lowercase letters, numbers, and special characters like @, #, or %. They are also typically longer than simple passwords - generally 8 characters or more. The added length and use of various character types creates a complex password that cannot be easily guessed or cracked by hackers. While complex passwords may be harder to remember, they provide much stronger security for your online accounts. To better protect your online information, unique and complex passwords are a must. We go into how to write down your passwords, and other ways to manage them, in another blog post. 
Complex passwords are harder to decipher because they utilize a greater variety of character types. By using upper and lowercase letters randomly combined with numbers and special characters, the number of possible password combinations increases exponentially. Even an extra character or two makes a password vastly more secure. Longer passwords also provide more security. A seven character password only has about 10 billion possible combinations. But a 12 character password has over 5 trillion combinations! The more characters in your password, the longer it would take a hacker to cycle through every possible option. Think of it this way - a weak, short password is like having a bike lock that can easily be snapped. But a longer, more complex password is like a bank vault that would take years to crack. Simply enhancing your password complexity can make a major difference in keeping hackers at bay.

Password Game/Example

Imagine for a moment you have been given the following randomly generated password:
nK2$fQh#91A
This password is very strong and would be difficult for a hacker to crack. However, as humans, we have a hard time remembering completely random strings of characters. To make passwords easier to remember, we tend to follow patterns like starting with a capital letter, using lowercase letters for most of it, and ending with a number or symbol. For example:
Password1!
While this password follows good practices by having 10 characters and using different character types, the predictable pattern makes it much less secure. Whereas the random password had over 6 quadrillion possible combinations, a password following a common pattern has only about 1 trillion combinations - drastically reducing the complexity. This example illustrates how our human desire for memorable passwords inherently works against having the most complex and secure passwords. It's a difficult balance to strike.

Multi-Factor Authentication  

Multi-factor authentication (also known as two-factor authentication or 2FA) adds an extra layer of security. It combines your password with a secondary step like entering a code sent to your phone or email. The way it works is simple - when you login to an account, you first enter your password as normal. Then you are prompted for an additional code or approval via another device before gaining full access. 
This secondary step makes it much harder for hackers to access your accounts, even if they manage to steal your password. That's because they would also need physical access to your phone or email that the code is sent to. Major online services like Gmail, Facebook, and many banking websites now offer multi-factor authentication as an option. Turning it on provides greatly enhanced security for your sensitive accounts. Rather than relying solely on a password, multi-factor authentication adds another layer of protection and you can rest easier knowing that your accounts have stronger security against unauthorized access.

Conclusion

In conclusion, passwords are crucial for maintaining the security of our online accounts and sensitive data. Simple, easily guessed passwords provide very little actual security, while complex, unique passwords provide stronger protection. However, people tend to follow patterns, making it difficult to remember complex passwords and striking the balance between memorability and security. Adding multi-factor authentication to our accounts provides an extra layer of security and greatly enhances account protection. Remember, a stronger password means better security. Don't forget to read our next blog post about strategies to manage your passwords, and to stay up-to-date, don't forget to subscribe to our newsletter. Stay safe online! 

More on Passwords

Recent Posts

Previous
Previous

How Hackers Get Your Passwords