No matter what way you look at it, it's been a rough week for online account security. First,
LinkedIn revealed that a whopping 6.5 million account passwords were compromised by Russian hackers. Then, social music portal Last.fm put out a warning
to its entire userbase that their accounts may, too, have been compromised. Overall, an estimated 30 million people have been affected by the unfortunate events.
First things first
If you have a LinkedIn or Last.fm account and haven't yet changed your login details, the very first thing you need to do is update your password(s). The process is extremely simple for both sites: Simply log in using your existing username and password, navigate to the preferences (or settings) menu, and input your new password. Save the changes, and you're set to go.
Pick a password that you can remember, but not something that is a common word or phrase. Many sites will now require you to use numbers, capital letters, or even odd, non-alphanumeric characters in your
password. While it may seem like a nuisance, this practice does help make your account more secure. Here are some tips everyone should use as a starting point for creating a strong password:
- Do pick a complex combination of words with no relation to one another
- Do include numbers, capital letters, and other characters when possible
- Do pick a password you can remember without having to write it down
- Do change your password frequently, or any time you feel your account may be the victim of a breach
- Do not use names, specifically those of family members
- Do not use common phrases or short passwords
- Do not use the same password for multiple sites
- Do not tell anyone your password under any circumstances
- Do not rely solely on password managers to handle your info, they can be breached as well
A word of warning: If you think you're being creative or ultra-sneaky by using a well-known password, but with a few numbers swapped in for letters, you better think again. Modern password-cracking software used by identity thieves can account for alterations such as this, and you're actually better off making your password longer, with a complex phrase you made up on the spot.
Were you a victim?
After you've changed your password — and
only after you've changed it — you can check whether or not your account was actually part of the LinkedIn hacker breach. Online security company LastPass
has set up a tool that can check whether or not your password was one of the 6.5 million seized by the scammers. Simply type your old password into the box and click "Test my password" to find out if you were one of the ones affected.
