Thursday 3 September 2009

Nearly half of Brits use the same password for all accounts

In a new password/log-on survey of 1,661 Britons for CPP there have been some very poor (but perhaps not surprising) findings.
  • 46% use the same password for their banking, shopping and social networking
  • 54% use a variant of the same password
  • The average person visits 23 sites per month that require a password
  • 40% admit that someone else knows their password, of these 39% believe these people may have logged in using their credentials!
  • 18% use their pet's name for a password
  • 12% use memorable dates for a password
  • 10% use their children's names for a password
  • 9% use their mothers maiden name for a password
A good way to look at electronic security is to make the analogy with physical assets. You would not use the same key for your office, car, home, parents house and safe-deposit box etc. so probably very wise not to use the same password!

One method of risk reduction is to take out and use a single credit card for all your on-line purchasing. Keep the limit on this card low and make sure you check the statement in detail. This can significantly reduce your on-line fraud exposure.

One must consider that if you are using the same password for multiple systems and platforms your risk of being compromised goes up exponentially.

If you and your company are lost in a sea of inappropriate password practices and don't know the way out contact FaberBrent now.

3 comments:

  1. No shock here, sadly.

    ReplyDelete
  2. Tim McCreight, CISSP CPP CISA7 September 2009 at 04:18

    Agreed. I appreciate the link to a physical security comment - I always try to link IT security concepts with something people understand a little easier. For me, the link to physical behaviour makes it easier.

    Good article!

    ReplyDelete
  3. It seems that most of the password insecurity articles I read involve the British. I'm sure most of us remember when better than half of the selected sample were willing to give up their password for a chocolate bar. Maybe, in addition to teaching good password selection, we should include a discussion of why it is a bad idea to talk to journalists about your password selection scheme.

    ReplyDelete