396 lines
13 KiB
Markdown
396 lines
13 KiB
Markdown
[Source](https://www.cnet.com/news/microsoft-security-guru-jot-down-your-passwords/ "Permalink to Microsoft security guru: Jot down your passwords - CNET")
|
|
|
|
# Microsoft security guru: Jot down your passwords - CNET
|
|
|
|
CNET también está disponible en español.
|
|
|
|
[Ir a español][1]
|
|
|
|
Don't show this again
|
|
|
|
[ ![CNET][2]CNET ][3]
|
|
|
|
[Reviews][4]
|
|
|
|
* [Best Products][5]
|
|
* [Appliances][6]
|
|
* [Audio][7]
|
|
* [Cameras][8]
|
|
* [Cars][9]
|
|
* [Desktops][10]
|
|
* [Drones][11]
|
|
* [Headphones][12]
|
|
* [Laptops][13]
|
|
* [Monitors][14]
|
|
* [Networking][15]
|
|
* [Phones][16]
|
|
* [Printers][17]
|
|
* [Smart Home][18]
|
|
* [Software][19]
|
|
* [Tablets][20]
|
|
* [TVs][21]
|
|
* [VPNs][22]
|
|
* [Wearables & VR][23]
|
|
* [Web Hosting][24]
|
|
|
|
[News][25]
|
|
|
|
* [Apple][26]
|
|
* [Computers][27]
|
|
* [Culture][28]
|
|
* [Google][29]
|
|
* [Internet][30]
|
|
* [Microsoft][31]
|
|
* [Mobile][32]
|
|
* [Sci-Tech][33]
|
|
* [Security][34]
|
|
* [Tech Industry][35]
|
|
* [Special Features][36]
|
|
* [CNET @ Work][37]
|
|
* [Photo Galleries][38]
|
|
|
|
Subscribe
|
|
|
|
* [Newsletters][39]
|
|
* [Magazine][40]
|
|
|
|
[Video][41]
|
|
|
|
* [Apple Byte][42]
|
|
* [CNET Top 5][43]
|
|
* [How To][44]
|
|
* [Googlicious][45]
|
|
* [Smart Home][46]
|
|
* [Tech Today][47]
|
|
* [News][48]
|
|
* [Special Features][49]
|
|
* [3:59][50]
|
|
* [CNET Podcasts][51]
|
|
* [Laptops][52]
|
|
* [Phones][53]
|
|
* [Tablets][54]
|
|
* [TVs][55]
|
|
|
|
[How To][56]
|
|
|
|
* [Appliances][57]
|
|
* [Computers][58]
|
|
* [Gaming][59]
|
|
* [Home Entertainment][60]
|
|
* [Internet][61]
|
|
* [Mobile Apps][62]
|
|
* [Phones][63]
|
|
* [Photography][64]
|
|
* [Security][65]
|
|
* [Smart Home][66]
|
|
* [Tablets][67]
|
|
* [Wearable Tech][68]
|
|
* [Forums][69]
|
|
* [Speed Test][70]
|
|
|
|
[Smart Home][18]
|
|
|
|
* [Best smart home devices][71]
|
|
* [How To][66]
|
|
* [News][72]
|
|
* [Tour our smart apartment][73]
|
|
* [Tour our smart house][74]
|
|
|
|
[Product Compatibility][75]
|
|
|
|
* [Amazon Alexa][76]
|
|
* [Apple HomeKit][77]
|
|
* [Belkin WeMo][78]
|
|
* [Google Home][79]
|
|
* [Lutron][80]
|
|
* [Nest][81]
|
|
* [Philips Hue][82]
|
|
* [Samsung SmartThings][83]
|
|
* [Wink][84]
|
|
|
|
[Cars][9]
|
|
|
|
* [Best Cars][85]
|
|
* [News][86]
|
|
* [Reviews][87]
|
|
* [Recalls][88]
|
|
* [Pictures][89]
|
|
* [AutoComplete][90]
|
|
* [Carfection][91]
|
|
* [Cooley On Cars][92]
|
|
* [Concept Cars][93]
|
|
* [Electric Cars][94]
|
|
|
|
The Best
|
|
|
|
* [Affordable Cars][95]
|
|
* [Crossovers][96]
|
|
* [Electric Cars][97]
|
|
* [Family Cars][98]
|
|
* [Hybrids][99]
|
|
* [Luxury Cars][100]
|
|
* [Sedans][101]
|
|
* [SUVs][102]
|
|
|
|
[Deals][103]
|
|
|
|
* [The Cheapskate][104]
|
|
* [Best Tech Under $50][105]
|
|
* [Best VPN Services][22]
|
|
* [Best Web Hosting][24]
|
|
* [Best Password Managers][106]
|
|
|
|
By Category
|
|
|
|
* [All Deals][103]
|
|
* [Audio][107]
|
|
* [Cameras][108]
|
|
* [Desktops][109]
|
|
* [Hard Drives][110]
|
|
* [Laptops][111]
|
|
* [Monitors][112]
|
|
* [Phones][113]
|
|
* [Printers][114]
|
|
* [Software][115]
|
|
* [Tablets][116]
|
|
* [TVs][117]
|
|
|
|
[Download][118]
|
|
|
|
Join / Sign In
|
|
|
|
My Profile
|
|
|
|
* [Australia][119]
|
|
* [China][120]
|
|
* [France][121]
|
|
* [Germany][122]
|
|
* [Japan][123]
|
|
* [Korea][124]
|
|
* [Middle East][125]
|
|
* [United Kingdom][126]
|
|
* US Editions
|
|
* [English][127]
|
|
* [Español][1]
|
|
* My Profile
|
|
* [Forums][69]
|
|
* [Sign Out][128]
|
|
|
|
[Security][34]
|
|
|
|
# Microsoft security guru: Jot down your passwords
|
|
|
|
Jesper Johansson says the security industry has been giving out the wrong advice on passwords for 20 years.
|
|
|
|
by
|
|
* [ Munir Kotadia ][129]
|
|
|
|
May 24, 2005 10:32 AM PDT
|
|
|
|
* * * * * * [
|
|
|
|
][130]
|
|
|
|
**Companies should not ban employees from writing down their passwords because such bans force people to use the same weak term on many systems, according to a Microsoft security guru. **
|
|
|
|
Speaking on the opening day of a conference hosted by Australia's national Computer Emergency Response Team, or AusCERT, Microsoft's Jesper Johansson said that the security industry has been giving out the wrong advice to users by telling them not to write down their [passwords][131]. Johansson is senior program manager for [security policy at Microsoft][132].
|
|
|
|
"How many have (a) password policy that says under penalty of death you shall not write down your password?" asked Johansson, to which the majority of attendees raised their hands in agreement. "I claim that is absolutely wrong. I claim that password policy should say you should write down your password. I have 68 different passwords. If I am not allowed to write any of them down, guess what I am going to do? I am going to use the same password on every one of them."
|
|
|
|
According to Johansson, use of the same password reduces overall security.
|
|
|
|
"Since not all systems allow good passwords, I am going to pick a really crappy one, use it everywhere and never change it," Johansson said. "If I write them down and then protect the piece of paper--or whatever it is I wrote them down on--there is nothing wrong with that. That allows us to remember more passwords and better passwords."
|
|
|
|
Johansson said the security industry had been giving out the wrong advice about passwords for 20 years.
|
|
|
|
Delegates at the conference agreed that Johansson's advice made sense. However, some said they did not think it was practical.
|
|
|
|
One IT administrator from an international entertainment company who asked not to be named said that his company has a strict policy against allowing employees to write down passwords. Still, he said, he collates his personal passwords in an encrypted file because it "made more sense" than trying to remember multiple strong passwords.
|
|
|
|
A delegate from a government agency who also requested anonymity said that storing a password list in an encrypted file may work for the administrator, but it would not work for some users because they would then forget the password to decrypt the password file.
|
|
|
|
The delegate said that even using two-factor authentication--such as an RSA token--was not safe because people often write their PIN on a piece of paper and tape it to the back of the token.
|
|
|
|
"I know of a government minister that has done that," the delegate said.
|
|
|
|
_Munir Kotadia of [ZDNet Australia][133] reported from Sydney. _
|
|
|
|
## Share your voice
|
|
|
|
[
|
|
|
|
Post a comment
|
|
|
|
][130]
|
|
|
|
## [Tags][134]
|
|
|
|
[Security][34]
|
|
|
|
Close
|
|
|
|
Sign in to comment
|
|
|
|
Be respectful, keep it clean and stay on topic. We delete comments that violate [our policy][135], which we encourage you to read. Discussion threads can be closed at any time at our discretion.
|
|
|
|
[ Next Article: Here comes Samsung's answer to the iPhone X ][136]
|
|
|
|
[Download the CNET app][137] [About CNET][138] [Privacy Policy][139] [Ad Choice][140] [Terms of Use][141] [Mobile User Agreement][142] [Help Center][143]
|
|
|
|
[ ![CNET][2]CNET ][3]
|
|
|
|
© CBS Interactive Inc.
|
|
|
|
All Rights Reserved.
|
|
|
|
Affiliate Disclosure
|
|
|
|
CNET may earn fees when you click through to a partner site.
|
|
|
|
Top Brands
|
|
|
|
[1]: https://www.cnet.com/es/
|
|
[2]: https://cnet4.cbsistatic.com/fly/bundles/cnetcss/images/core/redball/logo_192.png
|
|
[3]: https://www.cnet.com/ "CNET Home"
|
|
[4]: https://www.cnet.com/reviews/
|
|
[5]: https://www.cnet.com/best-products/
|
|
[6]: https://www.cnet.com/topics/appliances/
|
|
[7]: https://www.cnet.com/topics/audio/
|
|
[8]: https://www.cnet.com/topics/cameras/products/
|
|
[9]: https://www.cnet.com/roadshow/
|
|
[10]: https://www.cnet.com/topics/desktops/products/
|
|
[11]: https://www.cnet.com/topics/drones/products/
|
|
[12]: https://www.cnet.com/topics/headphones/products/
|
|
[13]: https://www.cnet.com/topics/laptops/products/
|
|
[14]: https://www.cnet.com/topics/monitors/products/
|
|
[15]: https://www.cnet.com/topics/networking/products/
|
|
[16]: https://www.cnet.com/topics/phones/products/
|
|
[17]: https://www.cnet.com/topics/printers/products/
|
|
[18]: https://www.cnet.com/smart-home/
|
|
[19]: https://www.cnet.com/topics/software/
|
|
[20]: https://www.cnet.com/topics/tablets/products/
|
|
[21]: https://www.cnet.com/topics/tvs/products/
|
|
[22]: https://www.cnet.com/best-vpn-services-directory/
|
|
[23]: https://www.cnet.com/topics/wearable-tech/products/
|
|
[24]: https://www.cnet.com/web-hosting/
|
|
[25]: https://www.cnet.com/news/
|
|
[26]: https://www.cnet.com/apple/
|
|
[27]: https://www.cnet.com/topics/computers/
|
|
[28]: https://www.cnet.com/topics/culture/
|
|
[29]: https://www.cnet.com/google/
|
|
[30]: https://www.cnet.com/topics/internet/
|
|
[31]: https://www.cnet.com/tags/microsoft/
|
|
[32]: https://www.cnet.com/topics/mobile/
|
|
[33]: https://www.cnet.com/topics/sci-tech/
|
|
[34]: https://www.cnet.com/topics/security/
|
|
[35]: https://www.cnet.com/topics/tech-industry/
|
|
[36]: https://www.cnet.com/special-features/
|
|
[37]: https://www.cnet.com/at-work/
|
|
[38]: https://www.cnet.com/pictures/
|
|
[39]: https://www.cnet.com/user/join-cnet/
|
|
[40]: https://subscribe.cnet.com/magazine/subscribe/
|
|
[41]: https://www.cnet.com/videos/
|
|
[42]: https://www.cnet.com/apple-byte/
|
|
[43]: https://www.cnet.com/cnet-top-5/
|
|
[44]: https://www.cnet.com/how-to/videos/
|
|
[45]: https://www.cnet.com/googlicious/
|
|
[46]: https://www.cnet.com/videos/smart-home/
|
|
[47]: https://www.cnet.com/videos/tech-today/
|
|
[48]: https://www.cnet.com/videos/cnet-news/
|
|
[49]: https://www.cnet.com/videos/special-features/
|
|
[50]: https://www.cnet.com/collections/359-podcast/
|
|
[51]: https://www.cnet.com/cnet-podcasts/
|
|
[52]: https://www.cnet.com/topics/laptops/videos/
|
|
[53]: https://www.cnet.com/topics/phones/videos/
|
|
[54]: https://www.cnet.com/topics/tablets/videos/
|
|
[55]: https://www.cnet.com/topics/tvs/videos/
|
|
[56]: https://www.cnet.com/how-to/
|
|
[57]: https://www.cnet.com/topics/appliances/how-to/
|
|
[58]: https://www.cnet.com/topics/computers/how-to/
|
|
[59]: https://www.cnet.com/topics/gaming/how-to/
|
|
[60]: https://www.cnet.com/topics/home-entertainment/how-to/
|
|
[61]: https://www.cnet.com/topics/internet/how-to/
|
|
[62]: https://www.cnet.com/topics/mobile-apps/how-to/
|
|
[63]: https://www.cnet.com/topics/phones/how-to/
|
|
[64]: https://www.cnet.com/topics/photography/how-to/
|
|
[65]: https://www.cnet.com/topics/security/how-to/
|
|
[66]: https://www.cnet.com/topics/smart-home/how-to/
|
|
[67]: https://www.cnet.com/topics/tablets/how-to/
|
|
[68]: https://www.cnet.com/topics/wearable-tech/how-to/
|
|
[69]: https://www.cnet.com/forums/
|
|
[70]: https://www.cnet.com/internet-speed-test/
|
|
[71]: https://www.cnet.com/topics/smart-home/best-smart-home-devices/
|
|
[72]: https://www.cnet.com/topics/smart-home/news/
|
|
[73]: https://www.cnet.com/smart-home/apartment/
|
|
[74]: https://www.cnet.com/smart-home/house/
|
|
[75]: https://www.cnet.com/smart-home/compatibility/
|
|
[76]: https://www.cnet.com/smart-home/compatibility/amazon-alexa/
|
|
[77]: https://www.cnet.com/products/apple-homekit/compatibility/
|
|
[78]: https://www.cnet.com/products/belkin-wemo/compatibility/
|
|
[79]: https://www.cnet.com/products/google-home/compatibility/
|
|
[80]: https://www.cnet.com/products/lutron/compatibility/
|
|
[81]: https://www.cnet.com/products/nest/compatibility/
|
|
[82]: https://www.cnet.com/products/philips-hue/compatibility/
|
|
[83]: https://www.cnet.com/products/smartthings-hub-and-sensors/compatibility/
|
|
[84]: https://www.cnet.com/products/wink/compatibility/
|
|
[85]: https://www.cnet.com/roadshow/best/automobiles/
|
|
[86]: https://www.cnet.com/roadshow/news/
|
|
[87]: https://www.cnet.com/roadshow/finder/automobiles/
|
|
[88]: https://www.cnet.com/roadshow/recalls/
|
|
[89]: https://www.cnet.com/roadshow/pictures/
|
|
[90]: https://www.cnet.com/roadshow/auto-complete/
|
|
[91]: https://www.cnet.com/carfection/
|
|
[92]: https://www.cnet.com/roadshow/cooley-on-cars/
|
|
[93]: https://www.cnet.com/roadshow/concept-cars/
|
|
[94]: https://www.cnet.com/roadshow/electric-cars/
|
|
[95]: https://www.cnet.com/roadshow/best/automobiles/most-affordable/
|
|
[96]: https://www.cnet.com/roadshow/best/automobiles/crossovers/
|
|
[97]: https://www.cnet.com/roadshow/best/automobiles/electric-cars/
|
|
[98]: https://www.cnet.com/roadshow/best/automobiles/family/
|
|
[99]: https://www.cnet.com/roadshow/best/automobiles/hybrids/
|
|
[100]: https://www.cnet.com/roadshow/best/automobiles/luxury-cars/
|
|
[101]: https://www.cnet.com/roadshow/best/automobiles/sedans/
|
|
[102]: https://www.cnet.com/roadshow/best/automobiles/suvs/
|
|
[103]: https://www.cnet.com/deals/
|
|
[104]: https://www.cnet.com/cheapskate/
|
|
[105]: https://www.cnet.com/holiday-gift-guide/under-50/
|
|
[106]: https://www.cnet.com/news/the-best-password-managers-directory/
|
|
[107]: https://www.cnet.com/deals/audio/
|
|
[108]: https://www.cnet.com/deals/cameras/
|
|
[109]: https://www.cnet.com/deals/desktops/
|
|
[110]: https://www.cnet.com/deals/storage/
|
|
[111]: https://www.cnet.com/deals/laptops/
|
|
[112]: https://www.cnet.com/deals/monitors/
|
|
[113]: https://www.cnet.com/deals/phones/
|
|
[114]: https://www.cnet.com/deals/printers/
|
|
[115]: https://www.cnet.com/deals/software/
|
|
[116]: https://www.cnet.com/deals/tablets/
|
|
[117]: https://www.cnet.com/deals/televisions/
|
|
[118]: http://download.cnet.com
|
|
[119]: https://www.cnet.com/au/news/microsoft-security-guru-jot-down-your-passwords/
|
|
[120]: http://www.cnetnews.com.cn/
|
|
[121]: http://www.cnetfrance.fr/
|
|
[122]: http://www.cnet.de/
|
|
[123]: http://japan.cnet.com/
|
|
[124]: http://www.cnet.co.kr/
|
|
[125]: http://me.cnet.com/
|
|
[126]: https://www.cnet.com/uk/news/microsoft-security-guru-jot-down-your-passwords/
|
|
[127]: https://www.cnet.com/news/microsoft-security-guru-jot-down-your-passwords/
|
|
[128]: https://www.cnet.com/user/logout/
|
|
[129]: https://www.cnet.com/profiles/munir+kotadia/
|
|
[130]: https://www.cnet.com#comments
|
|
[131]: https://www.cnet.com/news/passwords-the-weakest-link/
|
|
[132]: https://www.cnet.com/news/microsoft-trusted-windows-still-coming-trust-us/
|
|
[133]: http://www.zdnet.com.au
|
|
[134]: https://www.cnet.com/tags/
|
|
[135]: https://www.cnet.com/community-guidelines/
|
|
[136]: https://www.cnet.com#page-samsung-galaxy-s9-gs9-here-comes-samsungs-answer-to-the-apple-iphone-x
|
|
[137]: https://cnet.app.link/e/ZcTLbpPxzG
|
|
[138]: https://www.cnet.com/about/
|
|
[139]: https://legalterms.cbsinteractive.com/privacy
|
|
[140]: https://legalterms.cbsinteractive.com/adchoice
|
|
[141]: https://legalterms.cbsinteractive.com/terms-of-use
|
|
[142]: https://legalterms.cbsinteractive.com/eula
|
|
[143]: https://cbsi.secure.force.com/CBSi/knowledgehome?referer=cnet.com
|
|
|