Marin CyberSafe News: New Year, New Passwords

In This Issue

• How To Create a Strong Password
• MFA: Security Beyond the Password
• Password Managers

• What About Passkeys?

From the desk of Jason Balderama, CISO, County of Marin

Passwords are often your first line of defense to online accounts and services. Knowing how to create and store strong passwords is one of the most critical aspects of everyday cybersecurity.

While creating, storing, and remembering passwords can feel overwhelming, there are methods and tools to help. Let’s review how you can start the year with stronger, updated passwords.

How To Create a Strong Password

Long.  Passwords should be at least sixteen (16) characters long. The longer your password, the longer it takes for hackers to crack it by force. Right now, an eight-character password takes only a few minutes to guess by using software and trying every combination of letters, numbers, and symbols.

Random.  A string of mixed-case letters, numbers, and symbols are the strongest passwords. If you need to remember a password yourself, use a passphrase of four to seven random words.

Unique.  Each password you create should be used for one and only one account. If you use the same password for multiple sites and your password is stolen, a scammer can potentially gain access to all the accounts where that password was used.

MFA: Security Beyond the Password

Multi-factor authentication (MFA) adds an additional layer of security to each of your accounts. When you turn on MFA, you use more than a password to log in, which might mean a fingerprint, facial scan, a text message, or an authenticator app. Enable MFA anywhere and everywhere you can.

Password Managers

With a password manager, you only need to remember one master password to unlock your secure vault of stored passwords. Here are some benefits of using a password manager.

• Convenience. No more struggling to remember dozens of passwords.
• Enhanced security. Automatically generate and store long, unique, and complex passwords.
• Timesaving. Browser extensions and smartphone apps can autofill credentials for quick and secure logins.

• Secure vaults. You might be wary of storing all your passwords in one place, but high-quality password managers use strong encryption and zero-trust architectures to keep your data secure. Password managers are safer than notebooks, sticky notes, spreadsheets, or reusing passwords because you’re trying to remember them all.

   

What About Passkeys?

Passkeys are an exciting new technology that remove the need for passwords. Instead of entering a password, with passkeys you typically log in by having using a secure device like your smartphone, and using biometrics like a facial scan.

Check with your service providers to see what options are available.

Disclaimer

The information provided in Marin CyberSafe News is intended to increase people’s awareness of cybersecurity and to help them behave in a more secure manner. Links in this newsletter are provided because they have information that may be useful. The County of Marin does not warrant the accuracy of any information contained in the links and neither endorses nor intends to promote the advertising of the resources listed herein. The opinions and statements contained in such resources are those of the author(s) and do not necessarily represent the opinions of County of Marin.

Copyright © 2025 County of Marin, All rights reserved.