Strategies to avoid changing password frequently

Earlier it was Heartbleed that has led the users to change their passwords frequently and after widespread, non specific data breach the conventional wisdom is that people should change all their passwords. On the contrary F-Secure Labs suggest a better way while choosing the right password management habits, you won’t need to change all your passwords every time you hear about an online attack.

Changing all passwords is a cumbersome task. Not only that, it’s a Band-Aid fix that stops short of offering a stronger and long term solution. Data breaches are the new reality, and it’s no longer a question of if it happens to you, but when. Sean Sullivan, Security Advisor at F-Secure Labs says rather than being told to change all their passwords, consumers need practical advice worth following. So when the next breach is disclosed, they will be in control and will only need to change those passwords they know are affected.

Listed below are successful strategies to avoid the hassle of changing passwords constantly:

Diversify to reduce your risk. Segregate your accounts by creating separate email addresses for different functions. For example personal, professional, financial. That way if one email is broken into, it won’t compromise all your other information too. “Why not have a separate email address for your financial accounts? Then don’t give that address to anyone but those financial institutions,” Sullivan says. A bonus: if you get banking-related email in your personal account, you’ll know immediately that it’s not legit.

When possible, use a different username than your email. Some services let you pick a unique username other than your email. When possible, it’s good to take this option as it’s that much more info a hacker needs to know. And use two-factor authentication when available.

Use a unique password for each online account. Using the same password to access different accounts is rolling out a red carpet for hackers. If a password for your Facebook account is stolen, criminals can hop over to your email and other accounts and try the same password there.

Don’t give online accounts any more data than is absolutely necessary. The less that is there to be compromised, the better.

If you are notified about a breach to a specific account, change that password. This goes without saying.

Changing your account password habits may take a little effort, but in the long run it’s easier and less stressful than having to change all passwords after news of every breach. And it’s worth it to keep your personal data and online identity safe. Sullivan suggests starting small, taking care of one account at a time and building up until all your passwords are handled.

It’s easy with the right tools

Then how does one remember so many unique passwords and log-ins, and manage them effectively? F-Secure’s password manager, F-Secure KEY, makes sure proper password management is as easy and painless as possible. With F-Secure KEY, there’s just one master password to remember, so it’s easy to have a unique password for each account. Usernames, passwords, PIN codes, and other important data are stored in one secure app.