Summary
- To increase user security, the United Kingdom has implemented legislation that prohibits smart devices from accepting passwords that are considered weak, such as simple strings or common words.
- The new rules require passwords to include uppercase and lowercase letters, numbers and special characters, and avoid predictable sequences or easily guessed personal information.
- Device manufacturers should guide users to set secure passwords from device launch and inform them of the minimum period of security updates the device will receive.
- UK law requires manufacturers and retailers to provide communication channels for reporting security issues to strengthen defenses against cyber-attacks in a country where 99% of adults own at least one smart device.
Everyone knows they love passwords 12345, asdfg (keyboard row) and Administration They are fragile. However, they continue to be widely used. That is why England decided to deal with the problem using legislation. The new laws prevent smart devices sold there from accepting bad passwords.
This means that cell phones, tablets, smart TVs, notebooks, electronic locks, and many other devices that access the Internet must now legalize their use in passwords that meet security criteria.
In general, these criteria recommend that passwords contain uppercase letters, lowercase letters, numbers, and special characters such as (#, $, &, and @). Other recommendations include:
- Avoid series like 123456, 1111111 This A B C D E F G or based on keyboard layout Querti;
- Avoid popular or dictionary words like Administration This password;
- Avoid using first names or important dates like birthdays.
Weak passwords are prohibited by law
Handling passwords is a tedious process, but it is the best way to protect user data. For this reason, the UK government has mandated that smart devices guide the user to change easy passwords on the first start of the device.
Manufacturers of these devices must also disclose details of how consumers should contact them about detected bugs or other security issues.
Another equally or more important step is to require manufacturers and retailers to inform consumers of the minimum period during which a purchased (or about-to-be-purchased) device will receive security updates.
The UK wants to reduce the risk of attacks
UK authorities' concern comes from observing that 99% of adults in the region own at least one smart device. This greatly increases the risk of hacker attacks or other malicious activities through online means affecting local citizens.
In referenceThe UK government has made it clear that it is taking the new legislation very seriously:
Manufacturers shouldn't provide anyone with things like webcams, which are so fragile and insecure that it's trivial to hack and control them. That ends now, and people can be more confident that the Internet-connected products they buy have better security measures in place to protect them.
UK Govt
In Brazil, there is no similar law, which is why safety precautions must be proactive. Using a password manager is a great way to avoid using weak combinations. Another tip is to use two-step authentication whenever this feature is available.
Watch the video below for tips on choosing strong passwords
