วิธีสร้างรหัสผ่านที่รัดกุม

รหัสผ่านที่รัดกุมเป็นวิธีหนึ่งในการปกป้องความเป็นส่วนตัวของคุณทางออนไลน์ ต่อไปนี้เป็นวิธีสร้างรหัสผ่านที่คาดเดายากหรือข้อความรหัสผ่านที่คุณจะจำได้และไม่มีใครคาดเดาได้

รหัสผ่านที่รัดกุมคืออะไร?

รหัสผ่านที่รัดกุมสำหรับบัญชีออนไลน์ของคุณควรเป็น:

สุ่มจริงๆ
ความยาวไม่เกิน 17 ตัวอักษร
แตกต่างกันสำหรับบัญชีออนไลน์แต่ละบัญชี
เปลี่ยนทุก 90 วัน

มีแนวทางปฏิบัติเกี่ยวกับรหัสผ่านบางอย่างที่คุณควรหลีกเลี่ยง:

อย่าใช้รูปแบบ "คำ + ตัวเลข" ทั่วไป
อย่าใส่ข้อมูลส่วนบุคคลที่เปิดเผยต่อสาธารณะ เช่น วันเกิดของคุณ
อย่าใช้ชวเลขทั่วไปและการแทนที่ (เช่น การใช้ "@" สำหรับตัวอักษร "a")

ข้อความรหัสผ่านคืออะไร?

แม้ว่ารหัสผ่านส่วนใหญ่จะเป็นการผสมผสานระหว่างตัวเลข ตัวอักษร และสัญลักษณ์ วลีรหัสผ่านจะประกอบด้วยคำที่รวมกันแบบสุ่ม ตัวอย่างเช่น:

StingrayCobaltLyingStimulusLiquid

Passphrases are both easier to remember and more challenging to guess than standard passwords. Just try to memorize the first letter of each word, or turn it into a song in your head. To defend against dictionary attacks, you should use at least five words, which should be truly random. You don't want the phrase to sound like a sentence.

Passphrase and Password Generators

To make sure the words you pick are genuinely random, use a free passphrase generator like Diceware or Secure Passphrase Generator. For an assortment of random letters and numbers, use Norton Password Generator or the Avast Random Password Generator. Many online accounts have specific password requirements, so you may need to add numbers, special characters, or a mix of uppercase and lowercase letters.

How to Memorize Passwords

Using easy-to-remember information like your birthday or the year you graduated from high school is highly discouraged. If you have trouble remembering passphrases, another strategy is to create an acronym out of a sentence. For example, "A gallon of milk used to cost 32 cents back in 1950" can translate into:

Agomutc$.32bi1950

It's generally not a good idea to write down your passwords; however, you can write down the phrase as a reminder, and no one will know what it means if they find it.

Set Up a Password Manager

As tempting as it may be, you shouldn't use the same username and password combination for all of your online accounts. Each account should have its own unique, complex password. Fortunately, you don't have to remember them all individually.

If you have multiple online accounts, you should use a password manager to keep track of your login credentials.

That way, you can log in to any account by entering the primary password for a password manager. Some of the best password managers programs also come with built-in password generators.

If you want to know how strong your password is, use a password checker like Password Meter.

Multi-factor Authentication

Regardless of your password strength, it's always a good idea to protect your online accounts with two-factor authentication (2FA) when possible. When you turn on 2FA for Gmail and other services, you'll receive a verification code via text message or email each time you log in. Most banking services and social media websites support some form of 2FA.

In addition to your online accounts, you also need strong passwords for all of your devices, especially if you carry them with you in public. In addition to passwords, most operating systems support some form of biometric verification. For example, Windows Hello uses facial recognition technology, and Apple Touch ID uses a fingerprint scanner to identify who is trying to access your account.

Why Are Strong Passwords Important?

Passwords safeguard your online accounts from other people who use the same computer. More importantly, they protect you against hackers who want to steal your personal information. For example, if someone knows your email password, they can find out a lot about you, including where you bank, where you work, and where you live. Hackers often sell stolen passwords on the black market for nefarious purposes.

Hackers use several methods to steal passwords, including:

Brute force attacks: A brute force attack uses automated software to guess passwords using randomized combinations of characters.
Dictionary attacks: Similar to brute force attacks, random word combinations are used to guess passwords.
Phishing: Hackers solicit private information using phishing emails, robocalls, or misleading links to obtain passwords from users.
Credential recycling: If a hacker has your username and password for one account, they will likely try using the same credentials on your other accounts.

What to Do If Someone Else Gets Your Passwords

If you suspect one of your passwords has been compromised:

Create a new, stronger password.
Change the passwords of any associated accounts.
Update your account recovery information.
Keep an eye on your bank account for unauthorized purchases.

How Do I Find out if My Password Was Compromised?

Your usernames and passwords could be compromised through no fault of your own. Several high-profile companies, like Facebook and Sony, have been victims of data breaches that exposed users' login credentials. You can visit the Avast Hack Check website and enter your email address to see if your privacy has been compromised. If so, you should change the passwords for all accounts associated with that email.

Set up security questions and account recovery information when possible to further protect your accounts.