HexaVault Blog

Are you following the good password etiquette? Here are some good practices to follow when it comes to passwords.

Use a strong password

Always use a password that is at least 10 characters long, has combination of upper case and lower case letters, numbers and special characters like * @ # $ % ! etc. A good way to generate a strong password which you can also remember and easily type is to take a dictionary word, capitalize random character in it and add special character and numbers to that. Some examples of strong passwords

RanDom@2015!
Future#190295
101+Spider4
Sellers.100&

It is perfectly fine to use a dictionary word in the password as long as you randomize it further with additional characters and numbers and change the placement. Length of the password is the key. Longer the password safer it is.

Generate strong and easy to remember password at strongpassword.io.

Do not reuse password

This cannot be stressed enough. Never use the same password on multiple accounts. It’s a bad idea! You never know how, and in which format your password is stored in the database of the website/app you are using. Most services do not store the password in plain text format. Password are stored in hashed format where a computed hash string is stored for the password. There are several algorithms that can be used to generated hash of a password and most are one way, in the sense that the original string cannot be derived from the hash. However, it is safer to use a different password for each account. In case one of the websites or apps are attacked and your password is leaked, the attacker will try to use the same password on common accounts like Gmail, Facebook, Twitter, Yahoo etc. If you are using the same password everywhere, you are doomed!

Never use the password of your main email account for anything else.

Change your password regularly

Keep changing your password. Password that was secure last year may not be so secure and strong this year because of constant progress being made in the computational power and speed. Your mobile phone is now more powerful than your computer was 5 years ago. New algorithms are being developed to crack passwords, new security flaws are discovered in major applications constantly. You must keep changing your password to stay ahead of the attackers.

Use a password manager

If you use long, complicated passwords, use a different password for each service and change it regularly, you can’t remember so many passwords. You have to use a password manager to store and manage the passwords. Are password managers safe? What if somebody hacks the password manager? They will get access to my accounts instantly!

Password managers are safe. HexaVault or any other leading password manager uses strong encryption to store the passwords. Some store the password on their secure cloud, some like HexaVault store the encrypted data only on your phone. The encryption used is super strong and if you use a long, strong password as mentioned above it cannot be cracked. You however also have to change your password manager’s password often. But in that case, you just have to remember one secure password and not multiple.

Passwords are everywhere, and you must make sure you follow the best practices to avoid getting hacked or your data stolen.

Do you use a single password across all your accounts? Email, social media, bank accounts? Bad idea. Let us explain.

You might think keeping the same password everywhere is easier because then you don’t have to remember multiple passwords and you don’t have to write it down anywhere either. But guess what, if your password somehow gets leaked from one of those services, you expose all your accounts at once.

That’s what happened with Twitter. It turns out, due to a bug, users’ passwords were written in a log file in plain text form. Yes, your password which you thought was super hard to guess was being written in a file in simple readable format for anyone to read! The Twitter log files were not leaked but if they had then your password would be public. If someone got hold of your email and you had used the same password for your email, then your email account would have been compromised as well. Hackers would then try to login to every major social media service using hat email and password combination to see if you are present on anyone of them.

Never use a common password across all services. Use a unique password for each service and change it regularly. Especially never use the password which you use for email accounts for any other service.

How do you keep track of so many different passwords? Use HexaVault to store your passwords.

What about the security of HexaVault?

HexaVault stores your passwords in encrypted format on your computer, not on some server. And it is encrypted using world’s strongest encryption standard. Even if your phone is lost, nobody can hack into your HexaVault.

Get HexaVault now. And if you haven’t changed your Twitter password, do so immediately.