A movie that briefly explained "why you should not remember passwords"


ByErvins Strauhmanis

"User name" and "password" are registered in the accounts of web services that are routinely used, such as Twitter, Gmail, Amazon, etc. However, it is difficult to memorize multiple passwords, Many people use it with web services. For those who are using such simple passwords on multiple websites, movies that can understand how dangerous it is by using passwords are released.

Here's why you should stop memorizing your passwords - YouTube


Currently, with the spread of the Internet, we have accounts on average of 27 websites per person.


To create an account on the web service, you need to register a user name and password, but many people choose a simple password that is easy to memorize with your head. And many people use the same password on different websites.


There are various programs that hackers get passwords, and trying out combinations of characters in their entirety "Brute force attackAnd ...


You can pretend to be a real website or enterprise and send e-mails or to enter information on fake websitesFishingAttack "and others.


If those passwords are stolen by passwords, those who use the same password will end up hitting mail accounts, cloud services storing photos, and online accounts of banks depositing money I will.


In 2016Yahoo stolen user account information for 1 billion peopleThe biggest hacking occurred in history.


If a person using the same password had a Yahoo account abroad it is the same as hacking information on other websites. In this way, since hacking is done constantly, security experts alert you to make different passwords for each website.


Security experts recommend using software called "password manager" rather than remembering easy-to-remember passwords.


Many people thought that "passwords are stored in their heads" until the password manager appeared, but it is difficult to memorize a number of complex character combinations in the head, 1 There is a limit to the amount of passwords that you can memorize.


As a result, people use simple passwords around here, but for hackers it is a good prey to get account information on multiple websites at the same time.


For example, announced annuallyFrequently used password rankingAnd, although the password "password" enters the top ten every year, hackers can use the program to reach the password "password" in a few milliseconds.


Meanwhile, passwords that combine 15 digits random large and small letters, numbers, and symbols that can be generated by password managers etc. will take 609 million years to analyze.


In other words, it will be necessary to stop managing passwords in the head and remember different complicated passwords in "virtual safe". This is the password manager.


The password manager first sets the "master password", but with this master password, you can access the account information of all websites saved in the password manager.


You do not have to memorize passwords for each website, so you can set a very complicated password of 15 digits or more if you want to do it.


And password managers can be used in many cases regardless of the device.


Then, what happens if the password manager gets hacked? Although hackers seem to be able to obtain account information of all websites, since password manager encrypts and saves user's account information, hackers get only chubbyly stirred passwords I will.


"Passage manager" LastPass "was hacked in 2015 and asked the user to change the master password, but the internal data was encrypted, so it was not damaged.


In this way, it is safe for password managers to use passwords, because people are using more websites and hacking is rampant. On the other hand, many password managers have a plug-in that allows you to log in automatically when you open a website with a major browser, but Vox also says the password manager's browser plug-in function is safe as anyone can use it I am concerned.


One million people are hit by hacking every year in the United States. Even if you consider plugins, it is better to use a password manager than to remember passwords in your head. In addition, Mr. Andrew of Vox explained in this movie, "Since you are likely to be used by others when physically losing the device, copy the passwords of all the websites to the note considering the loss of the device It is supplemented in the comment column of the movie.

in Software,   Video,   Security, Posted by darkhorse_log