Freely subscribe to our NEWSLETTER

“While passwords might just be one method of account authentication today, it’s still important for IT to advise employees to personally invest into password strength combinations to prevent brute-force attacks. These attacks attempt to guess the combination through automated methods but can be slowed or prevented with a combination of uppercase and lowercase letters, numbers and symbols that cannot be found in a dictionary, or a familiar person, character, product or organisation. This is the baseline (lowest) level of security that can be applied.

That said, the best password combination can still be exfiltrated with modern phishing attacks that trick users into inputting their password into a phishing website that mimics the real thing. These attacks are the most dangerous and need not only highly aware employees who use discretion when clicking on suspicious links but also security methodologies that can detect these attacks before they advance to unauthorised account compromises.

The best approach combines all of these ideas into a zero-trust approach to passwords and external links by fortifying combinations and using maximum scrutiny when it comes to what is trusted and what is clicked.”