Password should not be included in a non-encrypted stored document,
Password should not be revealed over the phone,
Password should not be revealed or hinted on a form on the Internet;
Password should not be “remembered” if the “Remember Password” feature in the application program such as Internet Explorer, Google Chrome, Safari and Mozilla Firefox is used;
Password should not be used on an account over the Internet which does not have a secure login (https);
password should not contain common acronyms;
Password should not have reverse spelling;
Password should not use part of your login name;
and password should not have part of numbers easily remembered such as birthdays, phone numbers, etc.
No Comments