Password Protection 101

Every computer server that stores important, confidential information requires a user to input a login and password. The login is an alias that defines the user's identity. Oftentimes, a login is the user's first initial followed by his or her last name. The password, on the other hand, is a secret code that only the user knows. Passwords are in fact the most common form of protection used to prevent access from unauthorized users. Anybody attempting to access a computer server, banking server, or long-distance telephone system must supply a password to gain entry.

Although passwords are indeed the most utilized form of protection, they are perhaps the weakest. Very often, passwords become 'misplaced' or fall into the wrong hands. Other times, an intruder may correctly guess the password. This usually occurs if the password is too simple. Some basic rules that you should follow for creating a password include:

#1. Change your password on a periodic basis. Never maintain the same password for a long period of time.

#2. Choose a good password by using at minimum eight characters. Try to mix uppercase letters, lowercase letters, and numbers together to make the password more difficult to guess.

#3. Don't rely on simple passwords like first names, last names, pet names, or car names. An intuitive hacker who knows a little about you can easily guess it.

#4. Never share your password with others. This is an invitation for trouble.

Many computer servers generate a random password for users. Once the user logs in, he or she can then manually change the password. Honestly, it would be best to keep the server's password. The problem is that the server's password is oftentimes very complex and hard to remember. A server might offer a password such as: x7Lr15Ac. Obviously, this could be a real pain to remember. Users typically opt to change their password to something simpler. The problem with this is that the new password is oftentimes way too simple to crack. If you cannot think up a good password, just stick with the server's password instead.

Have you ever forgotten your password? When you phone in, they always supply you with a new password instead. The reason for this is that passwords are encrypted and cannot be read. When you enter a password into a website, the server encrypts it and then stores it against the encrypted password stored on its hard drive. The only option available is to reset the password and send you a copy via email.

Password protection is obviously not a perfect science. But, technical scientists throughout the globe are working hard to develop a more viable solution. The next wave of protection will probably involve 'biometric techniques.' Instead of typing in a password, your computer will scan your eyes or ears to determine if you are who you say you are. It may be several decades before that day comes though. In the meantime, make certain that you always use a safe and difficult-to-guess password. It never hurts to be safe.