Most people assume that the passwords they use to secure their computer systems ensure that the systems are as secure as they can be. The fact that today’s password systems use a form of password encryption to identify the password entered and compare it with the one on file leads many people to believe that there is little that can be done to increase the security of the world’s computers. However, your computer’s password encryption capabilities may not be as foolproof as you might think!
Hashing algorithms are used by computers to create a string of characters – usually much longer than the original password – that the computer associates with the password you enter. Each time you enter your password, your system uses the algorithms to convert the characters you entered into the aforementioned string of characters and then compares that to the string of characters it has stored in its memory. If even one character is different, the password you entered is rejected. This type of password encryption is considered a one-way street, in that you cannot generate the actual passage from the algorithmically produced string of characters.
Unfortunately, not all password encryption programs are the same. Some offer very weak capabilities, such as using basic ciphers to change one letter to another. The problem with password encryption is that your computer security is only as strong as its weakest link – and for many computer systems that weak link is often the password security used in many applications. Some systems fail to use any type of password encryption at all, leaving your passwords vulnerable to discovery – particularly if you, like many others, use the same few passwords over and over again for every application. Some of the worst cases involve various programs and applications designed for web use.
Password encryption can also be bypassed in some cases, and the original password often remains in temporary memory on the system for some time. In addition, lack of security in a network structure, and less than trustworthy network support personnel can all leave your passwords open to discovery. TO make matters worse, you may even inadvertently log into a website or other system that is not what you think it is. Many websites devoted to phishing scams will attempt to get you to divulge passwords and other personal information by posing as websites with which you are familiar.
Before you become too alarmed, however, you should realize that your password encryption process is generally secure – for a time. Nothing lasts forever, and the basic problem with any password encryption process is that cracking software can almost always crack any password if given the time and opportunity. The real key to maximizing password encryption usefulness is to always select strong passwords (not real words, but strings of characters) and to change passwords frequently. Given enough time, it is possible to crack any password. The goal is to deny potential hackers the time they need. If you have doubts about the strength of your password protection, consult with a security or tech specialist.
