In the news this week has been yet another massive security breach - this time with the professional network - LinkedIn. Apparently, millions of account passwords were breached and available to the criminal element. As I had to go in to reset my password, one of my previous articles came to mind and I thought it would be prudent to revisit it, and here's why...
I was discussing this breach with a colleague - I had asked her if she had changed her LinkedIn password and how it affected her. Her response was "oh, I really don't use LinkedIn, there's not much personal information there and I have very few contacts, so even in the worst case, it probably wouldn't affect me too much". I paused and then I responded, "Okay, so a couple of things, first of all, have you considered that your personal account information is theoretically available now, and that things like phone numbers, addresses and the such can be harvested to take out loans impersonating you? Also, let me ask you this...this LinkedIn password of yours..it would be unique to LinkedIn and it's not a common password that you use for your email, for banking, for Facebook, right?". With this statement her eyes got very big and she immediately went to change her password.
This is exactly the type of issues that I was referring to with my blog entry Multiple Locks - One Key. As difficult as it is, we just cannot be using the same passwords for all websites. It's human nature to do so as it's impossible to remember unique passwords for each site, but refer to my article, I have some suggestions on how to manage passwords effectively and safely.
Finally, should anyone have your own tips about how you manage your online identities and would like to share them, I'd love to post a follow-up article on other strategies and techniques.