How to Maintain Account Hygiene for Your Business

Hey everyone! This weekend, we're diving into the topic of account hygiene. Just like my mom always told me to walk out the front door with a clean pair of underwear, it's crucial to keep your business accounts nice, fresh, and clean. I'm Neadom Tucker, owner of Kotori Technologies, and today we'll discuss several strategies to ensure your business is secure from hackers.

Sharing Information

One of the first things to consider is how you share your information. Never send your password in clear text. Clear text refers to any unencrypted message that doesn't have security around it. If you need to share login information, use encrypted messages or separate the username and password into different communication methods, such as sending one via email and the other via text message. Additionally, avoid giving your information to anyone who calls you claiming to be someone you know. Cell phone numbers can be hijacked, making it look like the call is coming from a trusted source. Always be cautious and secure when sharing your passwords and usernames.

Account Passwords

Setting up account passwords for phone calls is another essential step. This prevents impersonation and social engineering attacks. For example, a hacker might call a support center with a spoofed phone number and a crying baby in the background to manipulate the situation. By having an account password, you can prevent unauthorized changes to your account. This simple step can significantly enhance your security.

Two-Factor Authentication

Two-factor authentication (2FA) is a robust roadblock for hackers. While it's not foolproof, it adds an extra layer of security. If a hacker has your username and password, they would also need the authentication token, which could be a USB key, thumbprint, or a code sent to your phone. Implementing 2FA on your email system, cloud-based applications, and even computer logins can stop up to 100% of hacking attempts, depending on the authentication service used.

Complex Passwords

Using complex passwords is crucial to prevent brute-force attacks, where hackers guess passwords at a rapid rate. Complex passwords should not be easily guessable or found in the English dictionary. Websites like "Have I Been Pwned" have over 8 billion hacked username and password combinations. To manage complex passwords, use a password manager like OnePass, Dashlane, or RoboForm. These tools help you create and store unique passwords for each site, ensuring maximum security.

Storing Passwords

Lastly, avoid storing passwords on sticky notes, notepads, notebooks, or unencrypted files like Excel or Word documents. Password managers encrypt your passwords, providing a secure way to store them. If you need to keep passwords for disaster recovery, store them in a secure location like a safety deposit box. This ensures that your passwords are protected and only accessible when absolutely necessary.

Summary

To sum up, here are five key practices for maintaining great account hygiene in your business:

1. Don't share your password information in clear text.
2. Set up account passwords for phone calls to prevent impersonation.
3. Use two-factor authentication for added security.
4. Utilize complex passwords and a password manager.
5. Avoid storing passwords in unencrypted files or on sticky notes.

If you need help with any of these practices, feel free to reach out to Kotori Technologies online. Stay safe and secure!