Main menu (IT)

Week 1: Strong Passwords/Password Manager/Multi-Factor Authentication


In today's digital age, the security of your online accounts and personal information is paramount. Cyber threats are more sophisticated than ever, making it essential to fortify your defenses. Some of the most effective ways to do so is by using strong passwords, and if preferred, a reliable password manager, and utilizing Multi-Factor Authentication where available. 

Why Strong Passwords Matter:

Weak and easily guessable passwords are an open invitation to cybercriminals. They can lead to unauthorized access to your accounts, identity theft, and even financial losses. Here's why strong passwords are crucial:

  • Security: Strong passwords are your first line of defense against unauthorized access. They are complex and difficult for attackers to guess or crack.
  • Data Protection: Your personal and financial data is valuable. Strong passwords help safeguard it from prying eyes.
  • Account Recovery: In case of a security breach, a strong password can be your last line of defense to prevent further damage.

Tips for Strong Passwords:

  • Length Matters: Aim for at least 12 characters.
  • Mix It Up: Combine uppercase and lowercase letters, numbers, and special characters.
  • Three-Word Password: Try using three four-letter words and purposefully mistype one of them.
  • Avoid Guessable Information: Don't use easily guessable information like birthdays, names, common phrases, dictionary words, or relevant info.
  • Unique for Each Account: Never reuse passwords across multiple accounts.

Why Use a Password Manager:

Although CSUN does not have an official Password Management tool, we recommend you research and select the one that best fits your preferences while also still being one of the top managers, for ex: LastPass, Dash lane, or 1Password. It is well understood that remembering strong, unique passwords for each of your accounts can be challenging. This is where password managers come to the rescue:

  • Simplicity: Password managers generate and store complex passwords, eliminating your need to remember them.
  • Security: They encrypt your password vault, making it nearly impossible for hackers to access your stored credentials.
  • Convenience: Easily autofill passwords for websites and apps, saving you time and hassle.

Password managers generate complex and unique passwords for you, store them all in one place and tell you when you have weak, re-used passwords, or compromised passwords. They can also automatically fill credentials into sites and apps using a secure browser plugin. You only need to remember one master password—the one for accessing the password manager itself. (Tip: Create a memorable long “passphrase” as described above and NEVER write your master password down.)

Why Multifactor Authentication Matters:

MFA is a powerful defense mechanism that goes beyond just a password. It adds an extra layer of protection to your accounts by requiring multiple forms of verification before granting access. Here's why it's crucial:

  • Enhanced Security: MFA significantly reduces the risk of unauthorized access. Even if someone has your password, they won't be able to log in without the additional verification step.
  • Protects Against Password Theft: In today's world, passwords can be stolen or compromised. MFA ensures that your account remains secure even if your password is leaked.
  • Safeguards Personal Data: Many accounts hold sensitive information. MFA adds an extra shield to your personal and financial data.

How to Enable MFA:

Enabling MFA is easy, and most major online services and platforms offer it as an option. Here's a general process:

  • Go to Account Settings: Log in to your account and navigate to the security or account settings section.
  • Enable MFA: Look for an option to enable MFA. This might be called "Two-Factor Authentication," "Security Settings," or something similar.
  • Choose Verification Methods: Typically, you'll have the option to receive a verification code via SMS, use a mobile app like Google Authenticator or Authy, or receive email-based codes.
  • Follow the Setup Instructions: Each platform may have slightly different setup procedures, but they are usually straightforward and guided.
  • Verify Your Identity: Complete the setup by entering a verification code sent to your selected method.

CSUN MFA:

For CSUN MFA, don't forget to check out CSUN Information Security's Site on DUO MFA: Duo Multi-Factor Authentication | California State University, Northridge (csun.edu)

Week 1 Summary:

Take Action Today!

  • Choose a Password Manager: Research and select a reputable password manager such as LastPass, Dash lane, or 1Password.
  • Update Your Passwords: Replace weak passwords with strong ones using your chosen password manager.
  • Regularly Review and Update: Periodically review your accounts and update passwords as needed.
  • Enable MFA on your critical accounts now: Start with your email, financial, and social media accounts, and then consider other services like cloud storage, online shopping, and more.
  • Spread the word: Share this message with your friends, family, and colleagues. Encourage them to enable MFA on their accounts as well. Together, we can make a more secure digital world.

These steps will significantly enhance your online security and protect your digital identity from potential threats.

Remember, cybersecurity is a shared responsibility, and we all play a role in keeping the digital world safe. Share this message with friends and family to help them stay secure online too.

Additional Resources:

 

Return to October 2023 - National Cybersecurity Awareness Month page.