Remembering or storing a strong, secure password has taxed security experts. In the past, the best password practice...
By submitting your email address, you agree to receive emails regarding relevant topic offers from TechTarget and its partners. You can withdraw your consent at any time. Contact TechTarget at 275 Grove Street, Newton, MA.
was to pick a difficult-to-guess password, memorize it and never write it down. However, this is no longer practical as users have so many passwords to try to remember. Many users are now choosing easy-to-remember passwords that are more than likely weak and insecure. This represents a far more serious problem than a complex password that is written down and kept in a safe place. Recently, both Microsoft and security expert Bruce Schneier decided that it is better for users to choose a password too complicated to remember and write it down. Unfortunately, there is no perfect solution to this problem, but if you are not happy with this one, consider using a password database. You could use Schneier's free Password Safe utility, a smart card or token, which would give you a two-factor authentication solution when combined with a PIN -- another password to remember!
Dig Deeper on Enterprise User Provisioning Tools
Related Q&A from Michael Cobb
Is cookie encryption enough to protect sensitive information? Expert Michael Cobb explains how salted hashes can prevent attacks, and the secure way ...continue reading
A vulnerability was found in the Blackphone's Icera modem. Expert Michael Cobb explains how attackers could hijack the device, and if this would ...continue reading
Oracle is killing off the Java browser plug-in due to security risks. Expert Michael Cobb explains the next steps for enterprises with Java-based ...continue reading
Have a question for an expert?
Please add a title for your question
Get answers from a TechTarget expert on whatever's puzzling you.