Simplifying the Rules: Passwords

Infographic Cybersecurity

Passwords Rules

Password Creation: Avoid using personal information as this can be researched. Reference song lyrics, a quote you love, or a favorite place.

Password Length: The longer, the better! The minimum requirement should be 10-12 characters.

Password Structure: Strong passwords should also include the use of special characters, a mix of uppercase and lowercase letters, and a mix of both numbers and letters.

Change Passwords Regularly: The PCI DSS requires a 90-day or less change cycle. By updating passwords frequently, hackers have less time to try to break the password, and you also narrow the window of time in which someone might have access to your account.

Never Share Passwords: Do not share passwords or logins with a colleague, even if you both have the same job responsibilities.

Don’t Repeat Passwords: Do not use the same password for multiple systems, applications, or websites.

Strengthen Challenge Questions: Just because the question asks what your mother’s maiden name is or the city grew up in, does not mean your answer has to be truthful. Come up with a consistent, but inaccurate, response that only you can easily remember.

Change Default Passwords: Default passwords for common systems and devices can be found on the Internet, making it very easy for hackers to gain access.

Limit Login Attempts: After the number of unsuccessful login attempts is reached, lock the account and require administrative assistance to unlock it. The PCI DSS requires this limit to be no more than six failed attempts.

Learn more about password auditing and how we can determine potential password security weaknesses in your organization. Contact the RedLens InfoSec team if you have any questions or to get started.

Passwords: Simplifying the Rules


About the Author
Kathy Staples

Kathy Staples

Marketing Manager

Kathy Staples has over 20 years of experience in digital marketing, with special focus on corporate marketing initiatives and serving as an account manager for many Fortune 500 clients. As CampusGuard's Marketing Manager, Kathy's main objectives are to drive the company's brand awareness and marketing strategies while strengthening our partnerships with higher education institutions and organizations. Her marketing skills encompass multiple digital marketing initiatives, including campaign development, website management, SEO optimization, and content, email, and social media marketing.