Did you know that May 2 was World Password Day? No? I missed the memo too!
I was not raised in a world where my mom handed me her phone to play a game if I was bored on a car drive. In fact, I still remember taking Computer Science my freshman year of college… and loving it! (Yes, I am that old!) Our “simple” digital world has grown more complex in recent years, and that is why it’s necessary to draw attention to the importance of strong passwords.
Discussing password protection and bad actors/hackers may make you highly uncomfortable… maybe even create a bit of anxiety in your gut. But neglecting to educate ourselves regarding good security habits will not prepare us to “walk circumspectly/carefully” (Eph. 5:15) in this present digital age.
Internet crime escalated substantially in 2020. In fact, as the Customer Support Manager here at ChurchSpring, it’s not uncommon for me to hear from a church that their credit card was compromised. These same bad actors who steal credit card information are also looking to steal information from anywhere they can… including your church website. This doesn’t mean that we abandon our website, but rather that we diligently watch over the tool being used for righteousness (a.k.a. the spread of the gospel).
I have compiled a list of common tips to help you be “as wise as serpents and harmless as doves” (Matt. 10:16) when it comes to password security.
Create Unique Passwords
Repeating a password for your pizza app, photo app, and gym app may seem harmless. But if any of those app platforms get hacked, that password could be used to hack other more personal accounts that you own (such as your bank, PayPal, etc.). Even if you have a “system” for creating your passwords, if it is a recognizable pattern, your accounts are not secure.
Use Multiple Characters to Create Complexity and Length
So how do I create strong passwords? Start with a phrase that means something to only you (and please do not pick John 3:16!). Then choose certain letters and replace them with special characters. Here is an example…
-
- Password Phrase: LilacsBloomInSpring
- Strengthen the Password Phrase: Lil@c$Bl00mIn$pring
Creating unique passwords that contain a complex variety of multiple characters will create a stop-gap if an account gets breached.
Change Your Password Periodically
Even the most reputable and secure companies will eventually experience some kind of a breach. It’s just reality. When this happens, it’s common for companies to notify their accounts of the breach and update them as to the extent. (In fact, I received an email from Dell last week letting me know of an information breach.) When you receive a notification, login to that account and change your password immediately. If you have not changed your passwords in a while, a good habit would be to update all of your passwords every nine months.
Opt-in to Multi-Factor Authentication
Many companies will offer (or require) a two-part verification every time you login to your account in their platform. If this is optional, you will want to select that feature as an added security measure to protect your information. It can feel like an inconvenience at first, but it’s an added layer of protection that can prevent your website from being hacked.
Consider Using a Password Manager
If all of this password talk makes your head ache and your brain fog, you may want to look into a free or paid password manager. There are many options out there including a few that are built-in to your iPhone or Google account. LastPass and 1Password are great options if you’re new to using a password manager tool. Taking the time to understand how they work, and utilizing their capability to create complex passwords for you may give you some peace of mind.
Be Wary of Emails that Request Your Password
Scam emails have been around for decades, so that is no surprise to us. The emails that get us to click are the ones that look like a company we trust. If you receive an email that looks legit, but yet it requests for you to click a link to change your password, be skeptical. Research the issue by contacting that company without clicking any links or using any phone numbers written in that correspondence.
Prioritize Security on Your Church Website
Good password habits are a necessary part of protecting the flock that God has entrusted to you. As a church leader, you have access to member’s private information and this makes you a target of hackers. Our ChurchSpring team takes security seriously, and because of that we have implemented best practices to maintain security for your website. When you utilize the church directory or the groups feature, the ChurchSpring website system requires individual logins for each person. As you practice your password diligence, you may want to consider taking time to educate your members as well. It is better to be proactive than reactive to a hacker situation.
Take the first step towards enhancing your church’s digital resilience by viewing our demo webinar or sign up for a free trial of ChurchSpring. Empower your congregation with the tools and knowledge needed to navigate the digital landscape securely.
