--- title: "Cyber Tip of the Week: Password Protection-You’ve Been Doing it Wrong" description: "Cyber Tip of the Week: Password Protection-You’ve Been Doing it Wrong" --- [![AxisInsurance](https://blog.axisins.com/hubfs/files_2023/logo.png)](https://www.axisins.com/) Connect with us Call us Today [(201) 847-9175](tel:2018479175) [(877) 787-5258](tel:8777875258) - - About Axis - [Our Approach](https://www.axisins.com/about-us/) - [Our Team](https://www.axisins.com/our-team/) - [Testimonials](https://www.axisins.com/testimonials/) - [Case Studies](https://www.axisins.com/case-studies/) - [News & Events](https://blog.axisins.com/tag/news-and-events) - [Careers](https://www.axisins.com/job-opportunities/) - Product Lines - [Overview](https://www.axisins.com/products/) - [On-line Quoting](https://www.axisins.com/products/on-line-quoting/) - [Surety Bonds](https://www.axisins.com/products/surety-bonds/) - [Cyber Liability/Privacy & Network Security](https://www.axisins.com/products/cyber-liability-privacy-network-security/) - [Overview](https://www.axisins.com/products/cyber-liability-privacy-network-security/) - [Tail Coverage Insurance](https://www.axisins.com/products/tail-coverage-insurance/) - [Why Cyber Liability](https://www.axisins.com/products/cyber-liability-privacy-network-security/why-cyber-liability/) - [Cyber Hotline/Resources](https://www.axisins.com/products/cyber-liability-privacy-network-security/cyber-hotline-resources/) - [Claims Scenarios](https://www.axisins.com/products/cyber-liability-privacy-network-security/claims-scenarios/) - [Professional Liability Insurance (E&O)](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/) - [Overview](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/) - [Tail Coverage Insurance](https://www.axisins.com/products/tail-coverage-insurance/) - [Professions](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/professions/) - [Insurance](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/insurance-agents-brokers/) - [Legal](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/legal/) - [Real Estate](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/real-estate-agents-brokers/) - [Technology](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/technology/) - [Healthcare/Medical](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/healthcare-medical-practice/) - [Architects & Engineers](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/architects-engineers/) - [Financial Institutions](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/financial-institutions/) - [Construction](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/construction/) - [Consulting](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/consulting/) - [Media](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/media/) - [Mortgage Bankers & Brokers](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/mortgage-bankers-brokers/) - [Miscellaneous Services](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/miscellaneous-services/) - [Resources](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/resources/) - [Claims Scenarios](https://www.axisins.com/products/errors-omissions-professional-liability-insurance/claims-scenarios/) - [Management Liability Insurance (D&O)](https://www.axisins.com/products/management-liability-insurance-do/) - [Overview](https://www.axisins.com/products/management-liability-insurance-do/) - [Tail Coverage Insurance](https://www.axisins.com/products/tail-coverage-insurance/) - [Claims Scenarios](https://www.axisins.com/products/management-liability-insurance-do/claims-scenarios/) - [Resources](https://www.axisins.com/products/management-liability-insurance-do/resources/) - [Employment Practices Liability Insurance](https://www.axisins.com/products/employment-practices-liability-insurance/) - [Overview](https://www.axisins.com/products/employment-practices-liability-insurance/) - [Tail Coverage Insurance](https://www.axisins.com/products/tail-coverage-insurance/) - [Claims Scenarios](https://www.axisins.com/products/employment-practices-liability-insurance/claims-scenarios/) - [Resources](https://www.axisins.com/products/employment-practices-liability-insurance/resources/) - [Crime Insurance](https://www.axisins.com/products/crime-insurance/) - [Overview](https://www.axisins.com/products/crime-insurance/) - [Claims Scenarios](https://www.axisins.com/products/crime-insurance/claims-scenarios/) - [Resources](https://www.axisins.com/products/crime-insurance/resources/) - [Fiduciary Liability](https://www.axisins.com/products/fiduciary-liability/) - [Overview](https://www.axisins.com/products/fiduciary-liability/) - [Claims Scenarios](https://www.axisins.com/products/fiduciary-liability/claims-scenarios/) - [Resources](https://www.axisins.com/products/fiduciary-liability/resources/) - [FAQs](https://www.axisins.com/faqs/) - Client Resources - [Make a Payment](https://axisins.epaypolicy.com/) - [Apps & Forms](https://www.axisins.com/client-resources/apps-forms/) - [Report A Claim](https://www.axisins.com/client-resources/report-a-claim/) - [Request A Certificate of Insurance](https://www.axisins.com/client-resources/request-a-certificate-of-insurance/) - [Blog](https://blog.axisins.com/) - [Contact Us](https://www.axisins.com/contact-us/) -   CALL US TODAY [(877) 787-5258](tel:8777875258) ## Keeping you up to date on trends, emerging exposures and other critical issues. [Subscribe To Our Blog](https://share.hsforms.com/18qZLml0MTSqtYWBFqQFAGA35dv4?__hstc=172306556.605fbd816f522e1de3e9428cb969d5b4.1580877711545.1580973215492.1580978435349.10&__hssc=172306556.3.1580978435349&__hsfp=1035641285) # Cyber Tip of the Week: Password Protection-You’ve Been Doing it Wrong July 31, 2017 Chris Davis By Drew M. Smith ![](https://blog.axisins.com/hs-fs/hubfs/Imported_Blog_Media/AdobeStock_109783012-300x200.jpeg?width=300&height=200&name=AdobeStock_109783012-300x200.jpeg)Passwords are perhaps the simplest ways to protect your device. Using a code that only you should know, you can lock down your own device to prevent unauthorized users from accessing your information. But many companies use common passwords and techniques. However, conventional wisdom on password procedure protocols may have been wrong. The commonly used techniques that, while safe, in theory may be more open to being accessed from unauthorized parties. The National Institute of Standards and Technology (NIST) has recently proposed a new list of guidelines concerning passwords. To the surprise of many these guidelines recommend eliminating certain password features that many companies have used for years. Some examples of their recommendations include: - Removing “Change Your Password” requirements: The NIST has determined changing your password frequently actually hurts password integrity and puts an undue burden on an IT department. This is in line with other studies that agree that changing your passwords can be more compromising. They recommend changing a user’s passwords at their request or if there is evidence of being compromised. - Lessening complexity requirements: The NIST recommends that companies eliminate complexity requirements other than minimum length. The addition of other characters could lead a user to make a worse password choice. - Password “Hints”: Thanks to social media, password hints are now a detriment. Hackers can now use social engineering to guess the password if they are given a hint. - Screening against other passwords: When changing a password, the NIST recommends that a company screens that password against other common and compromised passwords. This includes repetitive characters, dictionary words and contextual terms.1 This suggested change in password policy can be jarring for a lot of people. Consult with your IT department and your officers before implementing any changes to cyber security or policy. Be wary of what you use as a password as hackers can get in even through the smallest mistakes.   For a copy of the new report: [https://pages.nist.gov/800-63-3/sp800-63b.html#sec4](https://pages.nist.gov/800-63-3/sp800-63b.html#sec4) 1[http://blog.eplaceinc.com/cyber/2017/05/23/nist-password-best-practices/](http://blog.eplaceinc.com/cyber/2017/05/23/nist-password-best-practices/) [Massive Cyber Attack: Lessons Not Learned](https://blog.axisins.com/massive-cyber-attack-lessons-not-learned) [Axis Insurance Services Opening Cyber Hotline](https://blog.axisins.com/axis-insurance-services-opening-cyber-hotline) Search ### Share this post [![Share on facebook](https://7528309.fs1.hubspotusercontent-na1.net/hub/7528309/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/facebook-color.png?width=24&name=facebook-color.png)](http://www.facebook.com/share.php?u=https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Dfacebook) [![Share on linkedin](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/linkedin-color.png?width=24&name=linkedin-color.png)](http://www.linkedin.com/shareArticle?mini=true&url=https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Dlinkedin) [![Share on twitter](https://7528302.fs1.hubspotusercontent-na1.net/hub/7528302/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/x-twitter-color.png?width=24&name=x-twitter-color.png)](https://twitter.com/intent/tweet?original_referer=https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&url=https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Dtwitter&source=tweetbutton&text=) [![Share on email](https://7528311.fs1.hubspotusercontent-na1.net/hub/7528311/hubfs/raw_assets/public/mV0_d-web-default-modules_hubspot/img/email-color.png?width=24&name=email-color.png)](mailto:?subject=Check%20out%20https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Demail%20&body=Check%20out%20https%3A%2F%2Fblog.axisins.com%2Fcyber-tip-of-the-week-password-protection-youve-been-doing-it-wrong%3Futm_medium%3Dsocial%26utm_source%3Demail) ### Recent Posts ### Categories - [E&O (19)](https://blog.axisins.com/tag/eo) - [Cannabis (11)](https://blog.axisins.com/tag/cannabis) - [Company News (1)](https://blog.axisins.com/tag/company-news) ![AxisInsurance](https://blog.axisins.com/hubfs/files_2023/art2.png) ### Connect to Our Cyber Hotline & Resources [Connect](https://www.axisins.com/products/cyber-liability-privacy-network-security/cyber-hotline-resources/) Please see our [Privacy Policy](https://www.axisins.com/privacy-policy) to understand how Axis Insurance Services handles your personal information. California Residents are entitled to specific rights which can be outlined on our Notice for [California Residents](https://www.axisins.com/california-privacy-policy). You may request information regarding our privacy policy or update your preferences by contacting us directly at 201-847-9175 or by completing the Request for Information on [Privacy form](https://info.axisins.com/axis-request-for-information-on-privacy). ### Schedule a Consultation ### Stay tuned with us on social networks! [![AxisInsurance](https://blog.axisins.com/hubfs/files_2023/logo.png)](https://www.axisins.com/) 795 Franklin Avenue, Suite 210 Franklin Lakes, NJ 07417 Phone: [201-847-9175](tel:2018479175) Fax: 201-847-9174 [www.axisins.com](http://www.axisins.com/) ### Quick Navigation - [Home](https://www.axisins.com/) - [About Axis](https://www.axisins.com/about-us/) - [FAQs](https://www.axisins.com/faqs/) - [Blog](https://www.axisins.com/blog/) - [Site Map](https://www.axisins.com/site-map/) - [Contact Us](https://www.axisins.com/contact-us/) - [Privacy Policy](https://www.axisins.com/privacy-policy/) - [Terms & Conditions](https://www.axisins.com/terms-conditions/) - [Accessibility Statement](https://www.axisins.com/accessibility-statement/) - [State Licenses](https://www.axisins.com/state-licenses/) Copyright ©2022 – 2024, Axis Insurance Services, LLC In California and Texas as NJ Axis Insurance Services, LLC. In Illinois as Axis Insurance Services of New Jersey, LLC. In New York as NJ Axis Insurance Agency New Jersey Corporate License #OP-9948294. California Corporate License #OD-79693. Axis Insurance Services, LLC is not affiliated with Axis Insurance Company, Axis Capital, its subsidiaries, or affiliates in any way.