Passwords! They’re needed everywhere and it can be hard to keep track of them. However, having good passwords (and password policies) in place is essential to data security and therefore HIPAA compliance. Some of the biggest data breaches have come from a hacker guessing or cracking someone’s password and simply logging in to the system. So how can we make passwords a little less painful?
First, a few Don’ts
It’s easy to fall into bad habits when trying to come up with a strong password for the 19th website you need one to access… but especially when you’ve got PHI involved, keep these don’ts in mind.
- Don’t use a basic password or one that is related to you and easy to guess.
- Is your password “password?” Or your kids’ names/birthdays? These are super easy for someone with even the most basic computer skills to figure out.
- Don’t write down your password - and especially don’t have it on or near your computer.
- You might think you’re being tricky by putting it on a post-it under your keyboard, but that’s actually a pretty common hiding spot!
- Don’t use the same password across multiple sites.
- It’s easier to remember for you, but you’re making it easier for someone to find your one password and access everything.
