Friday, May 8, 2015

Password Generator Using Words | Things to Know

Password Generator Using Words

We all know that hackers are out there and the worst of the lot want the key to our castle. In today’s world of online banking and VPN access to corporate accounts, there are many who say we are still using the wrong type of ‘key;’ one that is easily stolen and/or copied.  The password is still around though, for better or worse (though Microsoft is working on changing that soon, and with it comes the typical issues of forgotten passwords and account lockouts.  With the average help desk call costing around $25-$30 per call, a simple solution would be welcome in most environments.  Instead of just your typical self-service password reset solution; why not take a look at a password generator using words that the user has previously set? If you are interested in reducing help desk costs and empowering your users, read on after the jump!




A Password Generator Using Words - Why?



You have a near unlimited selection when searching for an authentication security system to put in place within your environment.  The competition today is fierce, and it has become more and more important to look for a solution that fits your needs specifically.  There are various solutions out there, including single sign-on, two-factor authentication, self-service password reset, and a password generator, just to name a few.  One of our favorite solutions encompasses enabling end users with a comprehensive self-service portal. 


The amount of password generator solutions out there is no less than the various authentication solutions.  There are plenty of choices to choose from for personal use, but when it comes to your business and your end users, you want something that won't give up the keys to your castle at the first sign of trouble.  


One of the many things falling under the strong authentication solution umbrella is the idea of a password generator using words that an end user has chosen: keeping familiarity and usability a priority over random generators that offer similar levels of security, with a lesser degree of usability.  A password generator is a useful tool that end users often request when password policies are too complex or cumbersome on their own.  If your users are clamoring for a much simpler solution, perhaps a password generator using words is the answer you need. 


Here are five things to consider when searching for a password generator solution for your environment:


Familiar Password Generator - Considerations

  1. Easy Integration
    One of the main reasons that you are looking to deploy a password generator solution is to streamline access. This should start from the beginning by installing the solution in your environment. Your ideal Self Service Password generator solution should be a plug and play set up, integrating seamlessly with whatever your repository may be: Active Directory, general LDAP, or even custom SQL tables.
  2. Consistent User Interface
    Keeping a consistent UI is important in order to reduce user training and increase adoption of the self-service password solution. Furthermore, it is important that the UI is cross functional and will appear the same no matter if the user is operating on a Mac, PC, tablet, or mobile phone. Today's end user often does not discriminate what technological brand is used to access their account, why should your solution?
  3. Great Technical Support
    You absolutely have to choose a company that is capable of backing their product with exceptional technical support.   This entails finding a vendor that does not farm out their solution to a third party service; especially one that has no real experience with the product, or is only reading from scripts - We all know how hackers love to fool around with scripts. When the technical support is provided by someone within the company who has worked directly with the product, you are much more likely to have an exceptional experience to help combat any issues that might arise.  
  4. Configurable 
    Being able to enforce your own password policies while using a password generator is a crucial part of the self-service password reset experience. Making the self service password reset solution your own includes: establishing your own challenge questions, the number that needs to be answered, controlling password complexity criteria, and choosing any OTP delivery methods. Part of this configuration may include providing a password generator using words the users have chosen themselves. A self service password reset solution will allow you to match your security policies and risk tolerances, to plug any security holes before they spring too many leaks.
  5. Easy Reporting/ROI 
    The number one thing to look for is whether or not the solution offers a good way to compile reporting for both projected and historical savings. The best way to prove that these solutions function effectively within your environment is to look at the numbers and see how much money you are saving each month, alongside the amount of users who utilize the solutions.

All in all, effective authentication security helps you secure your information, while giving you peace of mind. Users may find a password generator using words to be a bonus for the entire experience. Even so, the solution will still provide a large, positive impact on your existing environment. Now is the time to identify and resolve minor, frequent authentication issues, to prevent them from growing into larger security risks in the future.

No comments:

Post a Comment