Monday, October 5, 2009

Cracking the password

I had a disturbing nightmare yesterday. No, it was not that I was torched to death by mobsters nor did I happen to fall on the toothed granite rock after the bungee rope gave way. It was far worse. I had forgotten all my logins and passwords in this global village of Earth. I was a castaway.
My day …and night ends with logins and passwords. The moment I enter the office, my computer commands my credentials. Our company password policy demands complex passwords so I have a different password apart from the ‘usual’ ones which I use for web e-mail IDs. Thankfully, my personal folders are not password protected now. I have already lost two such folders encompassing 2 years of hard work and a few leisurely photographs. Then there are a host of websites which require knowing me. McKenzie does not give me access if the ‘caps lock’ is ON on an alphabet, stock market websites do not allow me to witness the ‘expected’ daily increase in portfolio return and even the good old Indian Railways plays fickle if I happen to transact online. Over the months, despite my earnest attempt to have a simple individual password policy for myself, I have been rushed into this quagmire more and more. If I have three user IDs and three unique passwords, there will be 9 possible combinations. My Online Banking allows only 5 attempts. Every two months I happen to make 5 attempts in a row and get my password reset. Alas! Had I had only one banking account? There are three; adding on to the complication. Then there are accounts on facebook, linkedin, orkut, twitter, blogger and other important websites (newspapers, travel etc.); not to forget my wife’s laptop and my everlasting desktop. Also, there are host of ATM PINs, Mutual Funds’ PINs and Online Investment PINs. My life is a worldwide web and I am the inefficient spider.
What does one do in such a case? Google as usual. There are online password managers like clipperz and Lastpass. Do I trust them? No. Do I use innovative methods of remembering passwords? Surely, but are they secure and time-tested? Perhaps…but they do not allow changing username of existing IDs.
‘You are an idiot?’ was my sister’s response when I narrated my plight to her. She showcased the Notes in her Outlook where she had beautifully crafted all the user IDs and password details. Such a Big Risk. My heart tanked when I saw that information. I cannot fathom preparing a document and listing all these sensitive and not too sensitive details. The idea of storing them on mobile seems a lost idea as there is a good probability that I will lose my mobile one day. So what do I do? Any ideas? I would have to killed myself before Alzheimer kills me.