Tweet

Don't Wait for Windows 8 to Secure Your Passwords

Guest post by: Dovell Bonnett

Article Overview: This week the press is all agog about how Windows 8 is going to “securely” manage passwords. Win 8 will do this with LiveID, syncing passwords across multiple computer platforms, using “TrustedID” to authenticate the computer, and storing all your long complex passwords in the cloud or on your device. But the sense of security is still misplaced.

Don't Wait for Windows 8 to Secure Your Passwords

When it comes to security, multi-authentication is the first topic that comes up, and these are:

1. Something you have. (Smart Card, token, etc.)
2. Something you know. (Password, PIN or pattern)
3. Something you are. (Fingerprint, iris scan, etc.)

So let’s break down Win 8 strategy based upon these factors.

First, storing passwords on the device that you will be using to access applications, sites, servers, etc., is a violation of “something you have.” Something you have has to be a completely separate piece of hardware that had to be brought together with another piece of hardware. That’s why we use smartcards, tokens, dongles, etc. So synchronizing and Trusted ID adds little to no security.

Second, jumping ahead to biometrics is the “something you are“. It does not matter if it is a fingerprint, iris image, facial recognition, voice print, etc. It all is digitally captured and turned into a bunch of 1’s and 0’s called a template. Capturing the template and doing a playback is a security risk, and storing your templates on multiple devices and sites increases the probability of theft. So off computer or on-token matching is the best solution, which ties back into “something you have”. Finally, if you opt out of biometrics then you have also dropped one more authentication factor.

Third, by eliminating the authentication of the first two factors, you are now down to Single Factor Authentication – the weakest security of all. Being left with the one password, “something you know“, to authenticate into LiveID is not secure. I have described in numerous bogs, articles and books how insecure user generated passwords are and how easy it is for hackers to crack. Also, keyloggers, post-it notes and over-the-shoulder surfers make typing in passwords insecure.

Finally, just the whole concept of having all my passwords stored on a single computer or on the web/cloud is very disturbing. It is these centrally located databases that are so attractive to hackers because once they get in they have access to numerous accounts and it makes no difference how long, secure or complex a password is because they will actually have the actual password in their possession. And this is a very valid concern; will the government or corporations also be able to collect my passwords thought court orders without my knowledge?

Power LogOn^® by Access Smart^® has been delivering multi-factor authentication, smartcard-based password management solutions for years. Users are able to store multiple passwords on a single smart card, no passwords are ever stored with in a computer that others can access our hack, and when the card is removed from the computer no critical logon data is left behind on the computer. If the card is lost or stolen all the passwords are protect because the card authentication includes a limited number of false entries before it is locked and needs IT assistance. From the users perspective a lost card is easily recoverable without having to change all your passwords. Users passwords need to be de-centralized and always in the possession of the user. Power LogOn is being used by individuals, small businesses, and large enterprises. So don’t wait for Windows 8 to think you can securely manage your passwords, implement today and protect your data. Complex passwords are recognized as the way to secure accounts. Power LogOn allows businesses to securely manage all those passwords and for IT to be put back in control of logon security..

Related Articles
  Is Your Laptop Password Protected?
  How to Reset Four Most Common Password of Lenovo ThinkPad Computer?
  Password Strategies That Keep You Safer
  Forgot Windows Administrator Password? Ways to Recover Windows Password on any Windows system.
  Profitable Online Business Ideas and the Recession Part 2
  How to Gain Access to Your PC When Forgot Windows 7 Password?
  My 3 Top Security Strategies for 2012.
  Network Security Doesn’t Have To Be A Burden
  Microsoft®’s Forefront Review
  Hacking Facebook Password with the help of free hacker tools for everyone
  A Must-have Tool for Increasing Productivity: Password Managers
  Top 2 Efficient Ways For Windows 7 Password Recovery
  How to Create a Windows Password Reset CD?
  Corporate Network Security Technology Comparison
  How to keep the information stored on your computer and smart phones safe
  Access-As-A-Service (AAAS) By Access Smart
  Safeguard Business Data - Value Advantage of Integrating Logical Access on an Employee ID Badge
  Windows 7 Password Finder-3 easiest and effective ways to recover windows 7 password
  How to Create a Windows XP Password Reset Disk?
  What is the best way to develop my sales skills?

Article Tags: identity theft, internet security, password management, smart cards



Related Forum Posts
Re: Quote of the Day - "Just because something works doesn't mea - Good qoutes. Case study Microsoft Dos Microsoft Windows 1 very good Microsoft Window 3.0 Very good Microsoft Windows 95 Better Microsoft Windows 98 Better Microsoft Windows XP Better Microsoft Windows Vista Better Windows 7 Best More is still coming I used them all
Re: What are your February Goals? - Hi Evan, Thanks for the feedback. I did wonder about those arrows, and the lack of a headline. I should probably add a headline and a set of arrows pointing to the Windows download button, then have the Mac option placed below it without arrows. Actually, if you had gone the "Mac" route on Windows you would have downloaded a pdf file, so no worries. Mac users, however, can't open exe files (unless they use OSX etc and have a Windows partition on their hard-drive). I'm still experimenting with download methods - the boomerang method / standard squeeze page download / splash page direct download without needing to join my list...
Bye Bye Vista - I've been cleaning house...Finally rid myself of this atrocious operating system called Windows Vista. Eeeegads! It's good to have a nice clean computer again - all reformatted and shiny new! Windows XP has been reinstalled and Vista is in the trash can. Vista is a bomb... plain and simple. ..
Re: A picture (video) is worth a thousand words.... - Phil, I switched to Mac leopard last year. I love it. It can also handle Windows on a separate hard-drive, so you get the best of both worlds. And if you are keen on doing more with video technology MAC is DEFINITELY the way to go. However, a note of caution - I have no intention of "upgrading" to Snow Leopard, which sounds bad. Also, on the Windows side, I chose XP rather than Vista.
Re: Working with Camtasia - [quote="kayanat":3og0rosu]Can I make Camtasia recordings work on Windows Movie Maker? Is it possible to save the recordings I record with Camtasia into another format so they will work on Windows Movie Maker?[/quote:3og0rosu] Absolutely. Just save the recording as an AVI or MPEG and then load it into Windows Movie Maker and edit from there. Of course, Camtasia provides some nice editing tools as well.


Share this article with your friends. Fund someone's dream.

Leave a comment below or share on the left and you'll help support entrepreneurs in Africa through our partnership with Kiva. Over $50,000 raised and counting - Please keep sharing! Learn more.

Newsletter

Get advice & tips from famous business
owners, new articles by entrepreneur
experts, my latest website updates, &
special sneak peaks at what's to come!

Name:
Email:

Popular Articles

Hypotheticals, Scenarios and Foresight

When the Going Gets Tough, the Tough Log On

Are You Too Good for Your Job?

Suggestions

Email us your ideas on how to make our
website more valuable! Thank you Sharon
from Toronto Salsa Lessons / Classes for
your suggestions to make the newsletter
look like the website and profile younger
entrepreneurs like Jennifer Lopez.