Surprisingly Useful AI Article Enhancements
Tesserent is calling attention to a significant shift in advice regarding password management. This follows recent guidance from the National Institute of Standards and Technology (NIST) suggesting that longer passwords and passphrases are more effective than shorter, complex passwords. This new direction has implications for businesses, public sector organisations, and consumers alike.
Mark Jones, Senior Partner at Tesserent, says this advice marks a change from what many Aussies have grown accustomed to hearing. “NIST is now recommending that increasing the length of passwords is more beneficial than focusing on complexity. This shift means IT teams across Australia will need to adjust their systems and launch new awareness campaigns to educate users on the benefits of this new approach,” Jones explains.
A Shift in Messaging
The change in password guidance highlights a departure from the previously emphasised strategies of regular password changes and complexity requirements. This pivot could create confusion for many users who have long been told that complicated passwords are essential for online security.
“This is a major shift in the messaging we’ve been pushing for years. It requires everyone in the industry, including the Federal Government, to rethink how we talk about password security,” Jones stresses. “If this isn’t explained clearly, it could lead to confusion, and that’s not what we need in the fight to keep Australia cyber secure.”
Why the Change?
According to Jones, this shift is driven by the increasing availability of more sophisticated tools to manage and protect passwords. With an estimated 24 billion stolen credentials believed to be circulating online, newer technologies like passkeys offer stronger protection by cryptographically securing users’ credentials when they log in.
“While passwords remain widely used, it’s crucial that people avoid reusing passwords across multiple services and websites,” Jones adds. “Password manager software can help generate and manage unique passwords, so even if one is compromised, it doesn’t expose all your accounts.”
Multi-Factor Authentication Still Essential
Jones also emphasises the continued importance of multi-factor authentication (MFA). “Wherever possible, people should enable MFA. This extra layer of security means that even if a password is stolen or compromised, it doesn’t give cybercriminals complete access to your accounts,” he says.
The advice from NIST and Tesserent underscores the importance of staying informed and adapting to new cybersecurity standards. As more businesses and consumers implement these changes, it will be essential to keep the focus on education and clarity around the evolving digital security landscape.
Last Updated on October 7, 2024 by Nick Ross
