Do you have the password 123456 on any of your accounts? How about 224466? If you do, it’s not surprising. It is dangerous though, and you should change it right away – and not to 1234567. A recent story published in the New York Times stated that one of every five people who has an account on the Web uses a password that can easily be guessed. In addition to 12345, 123456, and 12345678, these easily guessed passwords include “password,†“chocolate,†“monkey†and – of course – 654321. And of course you know, that if your password is guessed you will be exposing yourself to identity theft and fraud.
While you may think of yourself as a unique individual, the truth is that, as humans, we tend to follow the same habits as others. This includes what we think of when we decide on account passwords. According to Amichai Shulman, who works for Imperva, a security firm, a significant number of people pick from a surprisingly small pool of options. Imperva performed an analysis of passwords on a list leaked through a data breach that had nothing to do with Imperva and discovered that 20 percent of the 32 million passwords recovered were repeats of a sampling of just 5,000. Unbelievable no.
It’s perfectly normal to want to choose a simple password, seeing as how you may have several online accounts, not to mention accounts on your cell phone. However, identity thieves know people are doing this, and they are not hesitant to take advantage. They are even having success accessing “secure†accounts that lock a user out after a few incorrect password guesses. They simply have to know how many times they can guess incorrectly and then return once those requests have timed out. Also, since a lot of thieves have sophisticated technology on their hands, they can attack hundreds of accounts at a time until they get a “bite.â€
So what is a consumer to do? Simple. Change your passwords. You don’t have to make every single one different from the rest, but you do have to make them different from what other people will likely use. First of all, forget commonly used words or sequential numeric sequences, whether forwards or backwards. Next, forget things like your first name or your birthday – or your first name and your birthday. Finally, get out of the common mold of a password that is five or six characters in length. Make yours longer, as long as you can realistically stand to type in each time you sign in — and use special characters, not just letters and not just numbers. See this post to see why strong passwords are needed to protect your identity.
Thieves will likely stick to the status quo as far as length goes when they try to hack accounts. They will also likely stick to the most common passwords since they will give them the best results. Make sure those results do not mean access to your information. Of course, give more attention to your bank accounts and other super secure information, but don’t allow thieves to guess your passwords for items such as your Facebook profile either. Once they get access to these accounts, it only makes it more likely they can get to the bigger fish.
Want to learn more about how you can protect your identity? View our quick comparison chart to see what an identity theft protection company can do for you. To dig in even deeper read our reviews.