The right approach

Form and remember passwords

You can use a proverb, a song line or a term in combination with numbers and special characters to create a password. For example, “seven-mile boots” becomes the secure password 7mB00ts by replacing the word seven with the number “7”, miles with the abbreviation “m”, and replacing the letter “o” with a zero.

A trick to have multiple strong passwords for different applications or websites: Form a password as described here and prefix it with an individual abbreviation for each application or Internet page, for example like this:

• Basic password: I have five fingers at my hand = Ih5f@mh
• Variant for PC login: PCIh5f@mh
• Variant for Melderegister procedure: MRIh5f@mh

Correct use of passwords

• If your password is on a sticky note on your monitor, everyone who comes into your office can read it. Would you publicly post your bank card PIN or put your front door key out for anyone to copy!!?

• For the same reason: Passwords must not be written down anywhere!?

• When typing, make sure no one is watching you. It is not rude to ask people present to look away!

• Passwords must not be stored on programmable function keys or browser settings. Prefer password safes with a master key password (for example, Keepass).

• Make it a habit to log out of all websites or applications as soon as you want to end your session.

Sharing passwords

Passwords must never be shared. They are secret and personal. All authorized persons have their own password. They do not need yours! This way you also protect yourself from suspicion if there are irregularities in the use of your identifier.

Hackers also want to ask for your password, e.g. by telephone under false pretenses, such as in a survey. If third parties inquire about your password, report the incident to your supervisors or the contact persons. You can read more about this in a moment in the “Social Engineering” section.