Microsoft Bans Easy-to-Remember and Common Passwords

password key
As a result of the 117 million leaked credentials from LinkedIn, Microsoft has taken extra precautions to protect user accounts from being hacked by banning commonly used and easy to guess passwords. According to Microsoft, there are hackers who try to get into a Microsoft account by guessing the password upwards of 10 million times a day. In a blog post from Microsoft’s security team, Alex Weinert writes, “When it comes to big breach lists, cybercriminals and the Azure AD Identity Protection team have something in common – we both analyze the passwords that are being used most commonly. Bad guys use this data to inform their attacks – whether building a rainbow table or trying to brute force accounts by trying popular passwords against them.” There have been various strategies implemented over recent years to protect user accounts, such as requiring passwords to be a certain length, but these strategies have done little to stop breaches as hackers are up to date with these changes and adjust their hacking methods accordingly. Microsoft says that long passwords don’t often work because when people are given a minimum character limit, most people will select a password that is of that exact length. For example, common passwords that have a 16-charcter limit are “fourfourfourfour” and “passwordpassword”. In a recent white paper on passwords, Microsoft cybersecurity expert Robyn Hicock says complex passwords don’t work very well either as “Most people use similar patterns (i.e. capital letter in the first position, a symbol in the last, and a number in the last 2). Cyber criminals know this, so they run their dictionary attacks using the common substitutions, such as “$” for “s”, “@” for “a,” “1” for “l” and so on.” From now on, users who try to change their Outlook or Xbox Live password to “123456”, “login”, “password”, or “welcome” will not be able to do so. The best advice is to choose a password that’s unique and don’t use it repeatedly across various websites and services.

June 15, 2016 1:35:51 PM

Bill Boisvenue



Getting your computer network, phones and software applications to work shouldn’t be a monumental project;
yet we constantly hear from frustrated organizations like yours who call us when they’ve finally
had enough of the poor services and excuses from their current IT support firm.

Our offer of a FREE Service ticket is a no-risk way of introducing our services.
Let us diagnose and work on the computer problem of your choice and
find out what over 25 years of service excellence feels like.

Accepting this free offer in no way obligates you to do any further business with us but of course we hope you will!

1. Because our resources are not unlimited, the free service ticket will cover a maximum of 2 hours of remote support for 1 service issue.
2. Since customers who are the best fit for our services have a minimum of 10 computers, this free offer only applies to organizations of this size.
3. This offer applies only to organizations who are not already a customer of BSC Solutions Group.

Please fill out this form and a BSC Solutions Group “IT Guardian Angel”
will contact you within 24 hours.