[{"description":"Stick with Security: Require secure passwords and authentication lfair August 11, 2017 | 10:47AM Stick with Security: Require secure passwords and authentication By Thomas B. Pahl, Acting Director, FTC Bureau of Consumer Protection To make it harder for hackers to bluff their way onto a computer network, careful companies follow the advice of Start with Security and require strong authentication practices . We’ve considered FTC settlements, closed investigations, and the questions we get from businesses about implementing good authentication “hygiene.” Here are some tips on using effective authentication procedures to help safeguard your network. Insist on long, complex, and unique passwords. A password’s very reason for being is to be easy for a user to remember, but hard for a fraudster to figure out. Obvious choices like ABCABC, 121212, or qwerty are the digital equivalent of a “hack me” sign. Furthermore, experts have determined that passphrases or longer passwords are generally harder to crack. The smarter strategy is for companies to think through their standards, implement minimum requirements, and educate users about how to create stronger passwords. Also, when you install software, applications, or hardware on your network, computers, or devices, change the default password immediately. And if you design products that require consumers to use a password, configure the initial set-up so they have to change the default password. Example: A staff member attempts to select payroll as the password for the database that includes employee payroll information. The company sets up its system to reject an obvious choice like that. Example: To access the corporate network, a business allows employees to type in their username and a shared password common to everyone who works there. Employees are also allowed to use that shared password to access other services on the system, some of which contain sensitive personal information. The more prudent policy would be to require strong, unique passwords for each employee and to insist that they use different passwords to access different applications. Example: At a staff meeting, a company’s IT manager offers tips for employees about good password hygiene. She explains that passphrases or longer passwords are better than short passwords based on standard dictionary words or well-known information (for example, a child’s name, a pet, a birthday, or a favorite sports team). By establishing a more secure corporate password standard and educating employees about implementing it, the IT manager is taking a step to help her company reduce the risk of unauthorized access. Store passwords securely. A company’s first line of defense against data thieves is a workforce trained to keep passwords secret. But even the strongest password is ineffective if an employee writes it on a sticky note on her desk or shares it with someone else. Train your staff not to disclose passwords in response to phone calls or emails, including ones that may appear to be coming from a colleague. Con artists have been known to impersonate corporate officials by spoofing phone numbers or email addresses. A compromised password poses a particular risk if it can be used to open the door to even more sensitive information – for example, a database of other user credentials maintained on the network in plain, readable text. Make it difficult for data thieves to turn a lucky password guess into a catastrophic breach of your company’s most sensitive data by implementing policies and procedures to store credentials securely. Example: A new employee gets a call from someone who claims to be the company’s system administrator. The caller asks him to verify his network password. Because the new staffer learned about impersonation scams at an in-house security orientation, he refuses to disclose his password and instead reports the incident to the appropriate person in the company. Example: A company keeps user credentials and other passwords in plain","id":3197409,"source":"FTC USA Business Blog Posts","url":"https://www.ftc.gov/business-guidance/blog/2017/08/stick-security-require-secure-passwords-authentication","titre":"Stick with Security: Require secure passwords and authentication","pubDate":"Mon, 05 Oct 2026 08:07:08 +0200"},{"source":"Business Today","description":"Navigating the New Norm in Healthcare The global health crisis brought about by COVID-19 has irrevocably altered many facets of daily life, with one of the most significant shifts occurring in the healthcare and over-the-counter (OTC) product sectors. Jonathan Groves, Executive Chairman of Lanes, delves into these changes, highlighting the evolution of consumer behavior and the subsequent impact on the OTC market. The Shift to Home-Based Health Management Autonomy in Health: A New Consumer Paradigm The pandemic has catalyzed a move towards self-sufficiency in health management. Consumers, having adapted to the realities of lockdowns and self-isolation, are now more inclined The post Revolution in Self-Care: The Unexpected Power Shift in Health and Wellness appeared first on Business Today","id":1221223,"url":"https://businesstoday.news/revolution-in-self-care-the-unexpected-power-shift-in-health-and-wellness/?utm_source=rss&utm_medium=rss&utm_campaign=revolution-in-self-care-the-unexpected-power-shift-in-health-and-wellness","titre":"Revolution in Self-Care: The Unexpected Power Shift in Health and Wellness","pubDate":"Mon, 01 Apr 2024 10:30:28 +0200"},{"pubDate":"Wed, 13 Mar 2024 16:30:42 +0100","url":"https://businesstoday.news/shocking-revelation-manchester-law-firm-takes-on-wealth-giant-over-overcharging-scandal/?utm_source=rss&utm_medium=rss&utm_campaign=shocking-revelation-manchester-law-firm-takes-on-wealth-giant-over-overcharging-scandal","titre":"Shocking Revelation: Manchester Law Firm Takes on Wealth Giant Over Overcharging Scandal!","source":"Business Today","id":1182348,"description":"Key Takeaways: In a bold move against corporate overreach, a Manchester-based law firm, Barings Law, has announced plans to tackle the overcharging claims directed at St James’s Place, the UK’s largest wealth manager. With a surge in client complaints regarding excessive fees and unfulfilled services, Barings Law is expanding its workforce and establishing a new division dedicated to addressing these grievances head-on. As allegations of financial misconduct continue to surface, the battle for accountability in the financial sector intensifies. Let’s delve into the details of this groundbreaking initiative and its implications for both consumers and the financial industry. A Growing The post Shocking Revelation: Manchester Law Firm Takes on Wealth Giant Over Overcharging Scandal! appeared first on Business Today"}]