Password Advice

Robust password policies are vital to help organisations remain secure and protect against a range of attacks such as unauthorised access or hacking.

Almost all password policies consist of regular password changes, which tend to be long and also as random as possible. We suggest to both our employees and customers that employing a strong password, with a mix of capitalised letters, numbers and special characters is the most effective way of reducing the chance of being compromised by unauthorised access. However, we don’t force regular password changes for several reasons.

The National Cyber Security Centre (NCSC) believe that it’s more of a security risk to actively force users to change their passwords. They summarise it perfectly, “It’s one of those counter-intuitive security scenarios; the more often users are forced to change passwords, the greater the overall vulnerability to attack”.

This is mainly due to fact that most replacement passwords tend to be slightly different variations of previous ones. Users that are required to change their passwords on a regular basis are likely to choose weaker and weaker passwords each time to remember the most recent one. This behaviour can be exploited easily, for example if an attacker gets hold of a previous password, they’re likely to figure out the new one if it’s similar.

Another downside of frequent password changes is that it’s more likely that the new password will have to be written down to remember and left in vulnerable locations. Not to mention there’s an increased chance that a user might forget their password altogether.

At Pentagull we use system monitoring tools on ESB which provide useful information, such as the users last successful login and the most recent date that their password was changed. With this information we can inform users if we believe their account has been compromised, or simply ask the question to ensure it was them.

For more information click the following link to understand what the NCSC say regarding frequent password changes.

Other news stories

Resounding success of online booking system
Resounding success of online booking system

Belfast Telegraph reports on Ards and North Down's successful implementation of their new online booking system.

MERRY CHRISTMAS AND A HAPPY NEW YEAR!
MERRY CHRISTMAS AND A HAPPY NEW YEAR!

As the holiday season unfolds, Pentagull would like to wish all our valued customers, partners and friends a Merry Christmas and a Happy New Year!

Streamlining DIY Waste Management: The Crucial Role of HWRC Booking Systems for Councils
Streamlining DIY Waste Management

As legislation changes come into effect, we are all too aware of the impact on local authorities, but we believe HWRC booking systems offer a sensible and cost-effective way to manage a new burden.

The ESB platform turns sixteen
The ESB platform turns sixteen

Our Enterprise Service Builder platform celebrates its sixteenth birthday today!

Its give a gift time
Its give a gift time

It's that time of year again when we like to spread a little Christmas Cheer!

Behind the Excellence: Unveiling the Stellar Support Team That Sets Us Apart
Behind the Excellence: Unveiling the Stellar Support Team That Sets Us Apart

In customer-centric businesses, the heartbeat often resonates from the support teams. They are the unsung heroes, the wizards behind the curtains, and the backbone that upholds a company's reputation.