Cyber Smart Week - Passwords and Multi-factor Authentication
We all know how difficult it is to keep track of our passwords for the myriad of online accounts we are signed up to these days. We’ve all had to resign ourselves to clicking the ‘forgot password’ button when every possible password option has been exhausted.
And whilst it may seem quicker and easier to have a few passwords for all these accounts, this poses significant risk to your online security. If a cyber criminal gets hold of one of your passwords, they may then be able to access multiple accounts.
To ramp up your account security, try using these tips when creating new passwords:
- Use a different and unique password for every online account you create.
- Think about using a short phrase or string a few random words together to create a ‘passphrase’, rather than a password. These are far more difficult for attackers to guess.
- Add a list of numbers or symbols to make your passphrase more complex. For example, use ‘3’ instead of ‘E’, or ‘1’, instead of ‘I’.
- Go through and review some of the passwords for accounts that you have had for a while, they may be weak or you may have repeated them a few times across accounts.
If you find yourself needing to reset your password to access your Fire and Emergency device/s, you can do this securely yourself by following a few easy steps. (external link)
Multi-factor authentication
Multi-factor authentication is another way to ensure your accounts are being kept as secure as possible.
With single-factor authentication, you only need your password to verify that it is you that is logging into your accounts. This leaves you vulnerable if cyber criminals have gained access to your passwords.
With multi-factor authentication, you provide two methods of verification – your password and something else such as:
- A pin number sent to your phone
- Security questions
- Or software such as an application like Microsoft Authenticator(external link)
Fire and Emergency uses Microsoft Multi Factor Authentication for 2FA, which is only required when the device you’re using isn’t connected to the Fire and Emergency network.
If you’re using a device that isn’t connected to our network and you haven’t already set this up, you can follow the steps outlined here(external link). If you’ve already got this set up you’re already protected by Fire and Emergency’s 2FA.