Our specialty is Password Policy Enforcement.
Fast NIST Compliance | Password or Passphrase | Security is our policy
In the mean time, meet Sean and John the stars of the SSP comic below:
About Us
We've got clients in diverse industries all across the country. Want an impartial reference? No Problem. Our clients are more then happy to get on a call and/ or share an email to give you a first hand account of how living with our solution is.
Daniel Campbell - the company founder has been involved in IT Security since the mid 90s. Daniel and team can give you a recommendation based on your needs. From NIST Password Guidelines to overall security - and if we don't think that we're a good fit we'll tell you. We don't want customers, we want happy customers who are happy enough to recommend us to others as well as be customers for many years to come. Simple as that - that's our agenda!
You can choose the number of licenses you need and you can change between packages at anytime.
Essential
per user/ month
NIST COMPLIANCE: Included
AD AUDIT: 1 Per Year
CUSTOM DICTIONARY: Basic
Expert
per user/ month
NIST COMPLIANCE: Included
AD AUDIT: Unlimited
CUSTOM DICTIONARY: Advanced
No card required, it’s 100% free takes less than a minute
We're proud to serve the USA and Canada
THE "TO BE CONTINUED" IS CONTINUED
LEFT:BEFORE CHOOSING SSP | RIGHT: AFTERCHOOSING SSP
How we got: "Good news - no pwnage found"
when we used "password" have I been pwned
By: Dan | Published 16th April 2021
As well as an amazing amount of information there is also a lot of fun to be had with Troy Hunt's haveibeenpwned.com website. But first let me give you the back story. Warning! I am about to go off on a tangent which could leave you wondering a) what has that got to do with password policy enforcement and b) haveibeenpwned.com but trust me - it all fits in to place in the not too distant future. Lets proceed to that tangent as promised:
Floom the new google app https://floom.withgoogle.com/ is awesome. It's a way to tunnel through the earth using your android to see what it's like on the other side. I won't do it justice, so I won't say more than that, but we really loved it. This app gave me some inspiration for a trapped email longing for it's overdue release from my drafts folder. The recipient is an old friend in Australia who I haven't been in contact with for far too long.
My objective was to really standout in his inbox, as he get's an enormous amount of emails on a daily basis. Inspired by google's Floom I wanted do something that would make sense to my mate down under! Drawing from the app I decided to use an upside down generator, which I found with a quick google search. The website I used is called https://www.upsidedowntext.com/ and it does the following to any word(s) you choose:
"sᴉɥʇ ǝʞᴉl ʞoo˥" (look like this).
The plan was to write a subject line to my friend "down under" which would be eye catching, but it got my thinking about passwords. I wondered what would happen if I did this with HIBP and so I thought I would try it! To my surprise when I flipped "password" there was no pwnage found. I then did the same with "passwords" and again no pwnage found! I was amazed and spent hours playing with this concept!
I stress that I wouldn't recommend you use any passwords that you do this to but it's a bit of fun! Try a few yourself for entertainment purposes!
The email to my Australian friend has got one step closer to leaving my drafts folder but with a new and improved subject line "!ʞɐǝds ou ǝɯᴉʇ ƃuol ɐ". Another day then.
All the best,
DC
Should you be using a password or a passphrase as your password?
By: Dan | Published 21st April 2021
Here at SSP, we’re committed to helping you create a secure password policy that adheres to federal standards. And our commitment doesn’t stop there. We work to make sure password policy enforcement is simple, and your users can meet compliance requirements such as NIST password guidelines without having to write down or share their passwords.
Strong, robust passwords are crucial to protecting your business from cyberattacks. In fact, in America, passwords remain the primary authentication factor for most users. But should passwords be a word? What about a phrase as your password?
Experimenting with passphrases
This is something that users find easy to understand in our experience, and as you'll read has other benefits!
I am going to write the first phrase that comes to mind: "I’m hungry"
Well, I am getting hungry so that makes sense! If I used this as a password you might agree that I’d remove the apostrophe and space which would read as:
"imhungry"
That’s an 8 character password in length. So let’s see what that looks like in haveibeenpwned:
Now I will use the two-word passphrase and see what happens:
“I’m hungry” we now know is not a compromised password, but it’s not very sophisticated - everyone gets hungry! So we’re now going to check the strength to prove that point. Note: It is well documented that strength checkers vary in their results. For that and other reasons, it’s generally thought that they can lead users into a false sense of security - thinking you have a se. However to prove that "I'm hungry" isn't a sophisticated password we decided to try out our phrase with Kaspersky’s password checker and here are the results:
We already have "I’m hungry" and to join that I am going to write down the next two, 3-2-1 go:
Now in this example, I am hungry, nostalgic about snow skiing in Breckenridge and finally, The Big Apple, is a memory of another holiday in Manhattan. If I mix them up to create one passphrase to use as my password let’s see what happens:
"hungry Big Apple Breckenridge"
Let’s see what Kaspersky password checker thinks of this phrase of it:
For reasons unknown, when I put in "hungry Big Apple Breckenridge", Kaspersky automatically subtracts the spaces between the words hungry, Big and Apple, but I think you get the point.
Mix up your memories
For me the author, I’m hungry, The Big Apple, and Breckenridge are easy for me to remember. On their own they would be easier to guess - Apple follows Big and Breckenridge is a popular ski resort. But when you mix them you make a passphrase that you can use for your password that is easy to remember and much harder for an attacker.
P.s. The passwords and passphrases on this blog won't be used for anything other than this blog. We don't recommend that you use any password or passphrase that you have checked on any online service.
Smart Security Packs © 2021 - All rights reserved. Any other Trademarks and/ or images are property of their respective owners.
Take the anonymous password health quiz!
By: Dan | Published 28th April 2021
Instantly see what others think about password re-use, passphrases, password frustration, number of passwords, alternative authentication & when it is a reasonable time to change a password, click the picture below or use this link (goes to typeform). No PII data will be captured and will not be used for any other reason than being an anonymous quiz.
Smart Security Packs © 2021 - All rights reserved. Any other Trademarks and/ or images are property of their respective owners.
Made With Brizy