On World Password Day 2024, the UK Government has introduced measures to enhance the security of internet-connected devices such as speakers, televisions, smart doorbells and baby monitors.
Now, if they want to sell smart products in the UK, manufacturers must adhere to stricter guidelines aimed at protecting users and boosting online security, including secure passwords.
New UK legislation requires manufacturers to adopt minimum security standards, banning easily guessable default passwords.
According to the British Government, smart devices connected to the Internet can be dangerous, as cybercriminals can use them to break into home networks and steal personal information.
The regulation was introduced in the UK on World Password Day, which takes place on the first Thursday of May each year. In 2024, this day falls on 2 May.
World Password Day aims to raise awareness and serve as a reminder of the risks of weak passwords, and highlight the importance of protecting yourself from cybercrime.
Weak passwords can make users targets for bad guys who can steal their identities, access personal and business accounts, and steal money, information, or use the accounts to continue scamming others.
There are software available today that allow hackers to guess passwords easily in just a few minutes.
The best way to make your password harder to crack is to use a random three-word string, or add special characters and numbers, according to the UK Cyber Security Centre. The centre also recommends using two-factor authentication and using separate passwords for each email, banking, shopping and social media account, rather than using the same password across multiple platforms.
CNET reports that many people have trouble with passwords. Easy-to-guess passwords make accounts vulnerable to theft. Conversely, strong passwords are often difficult to remember and complex. Many people set up secure passwords with lots of difficult-to-guess characters, only to have to click the "Forgot Password" button later.
To make matters worse, we often have multiple accounts to set passwords for. Plus, even if we follow all the advice, we still run the risk of having our passwords stolen.
To reduce the risk of being hacked, CNET recommends making your password as long as possible. A good password is at least 16 characters long. Once you create a password like this, you won't have to worry much about password cracking software.
In terms of content, passwords that use random strings of characters are best, or combine three unrelated words to form a passphrase. Adding a special character, such as symbols or punctuation marks in the middle will not help.
If you use a passphrase, make sure it's meaningful to you and doesn't represent anything important. Don't use your birthday or other important personal date, as cybercriminals can easily figure it out.
Song titles and famous quotes are also bad ideas. Avoid using ineffective substitutions, such as @ for "a" and $ for "s." These are highly susceptible to password cracking software.
Also, don't reuse old passwords. Even the best passwords can be stolen and compromised. There are now many effective password management apps to help you remember them better.
Additionally, the old trend was to change your password every three months or so. However, according to CNET, experts say that while this may be a good practice, it’s not necessarily necessary. You should just change your password immediately if there’s any sign of a breach.
You should also be careful about posting too much personal information on social media. The more personal information you post, the more cybercriminals know about you. Small, seemingly insignificant pieces of data can be used to crack your password.
Stay away from quizzes posted on Facebook that may seem completely harmless, like what city you want to live in, or what your ideal vacation spot is. These questions may be designed to gather personal information and crack passwords.
Finally, always use two-factor authentication. Two-factor authentication, also known as multi-factor authentication, is being used by more and more websites to better protect users from account theft.
Also, avoid opting for two-factor authentication by sending a code to your phone number. There is a growing trend of cybercriminals taking over personal phone numbers. Once they have your phone number, they will also receive your two-factor authentication text messages.