When your internet security is jeopardized through brute force attacks, the kind of defense you may be having boils down to passwords. But the password in itself is not a defense against such attacks. The key lies in fact in the server, and how strongly the server has configured your passwords.
Servers Should Have Lockout For Internet Security.
When it is clear that passwords do not offer you the best of defenses to you, the researchers have pointed out that internet security is dependent on a variety of policies which the servers should adopt to lockout instruction. While there are some websites who are already adopting such lockout methods, for example, when you fail to login after three attempts, your account is disabled albeit temporarily.
Unfortunately, this kind of lockout method punishes the user, who may have forgotten his/her passwords and logically trying to remember it. There is yet another lockout methods to keep the hackers at bay, in which a ratio is adopted, which is like if you fail to login after ten repeated attempts in a hour, your account may be withdrawn temporarily, which indeed is a better way to treat your user, at the same time locking out the attacks through dictionary method. Remember the attacker may have to try thousands of logins per hour to succeed in getting at the password.
Offline Attack And Internet Security.
Offline attacks against Internet Security are another form of brute force attacks. This method enable the hacker to obtain data of the passwords from the server itself, and he runs the dictionary force software against this in his privacy, and tries to find out your passwords through a variety of permutations.
This means your servers should be secure, which does not give the data to hackers, and keep out data-harvesters from their site. The servers have now developed formats which store passwords in a resistant format which does not yield to the brute force, even as an algorithm mixes a salt generated at random with hash-keys. These kids of passwords cannot be easily decrypted and a dictionary attack will take months to get at the right password, ensuring your internet security.
Difficult Passwords
If you generate a password which you cannot easily remember, you are likely to have it stored in one place or the other. But when you store them in the computer you will be undermining your internet security, so you have to be careful about choosing a place which is insecure to store your password, and subject it to theft.
Passwords Might Be The Only Last Defense In Internet Security.
It is thus clear that just changing a password will not offer internet security, and passwords can be simply worthless. Unfortunately when we approach the issue of internet security, we still treat passwords as the first defense but the fact in today internet security atmosphere, they are only the last resort as defense. Your internet security will be at jeopardy if you believe only on the strength of passwords.
More in 
