
Online security: Ways to keep you passwords safe.
(MONEY Magazine) -- To keep your personal information and your finances safe, here are five things you need to know about online security.
1. You are now under attack by machines
After a hacking scare at Gawker Media last year, security firm Duo Security showed that it could crack 200,000 user passwords in under an hour using a "brute force" attack, in which computers try millions of passwords until one works.
Popular picks like "123456" take seconds to crack, but one with at least eight upper- and lowercase letters, numbers, and symbols will hold out long enough to send hackers searching for easier prey.
Online password generators like Random.org can help create a strong one.
2. Hackers look for your keys in public ...
Do you have photos of your kids or dog posted on Facebook?
Make sure they aren't useful to crooks: A password or security question based on, say, a pet's name is vulnerable, notes security expert and former hacker Kevin Mitnick. (Last year a Florida man was charged with using such info to hack the e-mail of celebrities, including Mila Kunis and Scarlett Johansson.)
So crank up your privacy settings -- and don't assume your mother's maiden name is a secret.
3. ... Or just ask for them
A strong password is pointless if you reveal it to others.
You've probably heard of "phishing" -- e-mails or fake websites that try to persuade you to give up your own info. Poor grammar is one red flag, says Rob Rachwald of data security firm Imperva. But the latest version is harder to spot: "Spear phishing" is realistic-looking, personalized e-mail that appears to be from a familiar source, like your spouse. When in doubt, just pick up the phone.
4. It's easy to limit the damage
The good news about password hacking? It needn't be a disaster -- if you simply maintain unique passwords for each account and change them regularly. (Sound hard? Read No. 5, below.)
According to Experian, nearly two-thirds of web users rely on the same password for at least two websites. That enabled hackers to compromise 90,000 Sony gaming accounts last October using passwords stolen from other websites.
5. You don't need a photographic memory
The average Internet user has 25 password-protected accounts to keep track of, according to a Microsoft study.
A sticky-note cheat sheet can be safe if you omit or scramble some of the info. But a password manager may be your best bet: Free software like KeePass can store log-in information in an encrypted database on your own computer. ![]()

Facebook's IPO price is available to the deal's underwriters and their bigwig clients. Regular folks will get to buy at market price the next day. More
In 2005, CNN got an exclusive look inside Facebook's first office and saw how Mark Zuckerberg decided to tweak a key early feature. Play

Facebook's IPO is causing a frenzy among investors eager to get a piece of the company when it goes public but is it a good idea to jump in when FB debuts? More

More than 30,000 people are petitioning for stay-at-home parents to get the same access to credit cards as their spouses. More

See how 10 entrepreneurs jump-started their careers after the age of 50 by going into business for themselves. More