
Man. Sometimes I don't get it. Perhaps after 25 years in this business I have started becoming cyber security paranoid.
I saw an article this week that says 73% of people they checked use their online banking passwords for other purposes - be it another banking site, or other online accounts, like Facebook or email. To me, a person that lives and breathes information security, passwords really are a big deal.
But I guess that's real-life, eh? It's human nature to work towards a point of diminishing returns and no further. This suggests to me that people think it's more work to protect their banking information than the information is worth protecting. The article basically makes the same point.
In reality, I don't believe it for a second. Granted, I have no statistics to back me up, but I would certainly imagine that if you asked 1,000 online users whether their bank accounts or some other online account was more valuable, that something north of 900 users would say "bank account" without blinking. So why the disparity?
Part of the problem is just the size of the issue. All sorts of websites now require you to log-on, and sometimes for no real service. The problem is that a person simply cannot remember a unique username and password to every site they need to log on to. I just checked my favorites list, and I find 59 sites I visit that require username and password. Me, as an admitted cyber security paranoid, obviously have 59 unique usernames and passwords, right?
Heh.
So, how do you do it? There are password managers that will help organize and remember passwords for you. Like Symantec's Identity Safe (available in Norton 360 and Internet Security). You store your sites, username and password in Identity Safe, then you log onto Identity Safe instead of each site. The software does all the matching for you. There are others, but this is the only one I have used and it gets the job done.
If you don't like that option? Classify your logins. Group your logins by generic accounts (which have no real personal information), social media (some personal information with no financial), shopping sites (that have personal information and may store credit card numbers), and absolutely personal sites (like banking sites, or sites that provide access to online medical information). If I use the same username and password on Newsvine as I do on WSJ and foxsports, and someone gets my password on one, am I really concerned if they can log onto one of the others?
At the other extreme are the banking sites. Now, I, personally, really am paranoid enough to use unique passwords on each of my banking sites, but there are only four of those - and four passwords I can remember. And since 30 of my 59 favorites are general sites that contain no valuable information, I am starting to control the size of my problem. But, for the rest, even writing them down and storing them in my desk drawer is better than using the same password everywhere.
Isn't it?