Living in a digital world means we’ve become accustomed to usernames and passwords. In fact, it’s been estimated that we each have 27 discreet online logins -- and that number is on the rise. But why do we even need all these usernames and passwords in the 21st century?
Shutterstock
To be fair, the concept behind the reliability of usernames and passwords isn’t a new development. The topic was discussed all the way back in a 1994 Washington Post article:
“Since the dawn of the electronic age, the computer password has been a trusted guardian of secrets large and small. For many people, obtaining their own password became a rite of initiation into computer culture itself.Now, growing numbers of security experts feel that the password in its common form is too old and unsophisticated for the job.”
Can you believe that was written more than 20 years ago?
Even back in the early days of the internet, security experts were struggling with ways to achieve both utility and security for online users such as a "use once, then throw away" password each time they logged in to a website.
As the Washington Post article further explains, “Computer passwords are a modern-day adaptation of techniques soldiers have used since ancient times to verify who is approaching in the dark.” But it wasn’t until the 1960s when multi-user time-sharing systems that contained several terminals were introduced that the username and password as we know them were introduced. Most sources pinpoint this to the Compatible Time-Sharing System that was operated at MIT between 1961 and 1973.
Over the decades, usernames and passwords have shifted from those first mainframes and networks to the home computer to logging into your favorite social media account on your smartphone. So, in a way, usernames and passwords seem to be a part of our DNA.
But why are they important, how have they evolved and will we even need usernames and passwords in the future?
The Importance Of Usernames And Passwords
Your username is your identification. It’s used to build a unique digital profile about you specifically. For example, your username for an online retailer would be connected to information like your shipping address, credit card number and shopping history. If someone else came along with the same username, the merchant wouldn’t know where to send the items that were purchased or which credit card to charge. It also uses your shopping history so it can send you discounts or promotions on products you may be interested in.
Your password is your authentication. Password authentication relies on a secret value that is known only to you.
So if a website used only your username, then anyone who knew your email address, for instance, could log in to any of your online accounts, including your bank, email, Facebook or Amazon accounts. Because it’s pretty easy to find someone's email address, it wouldn’t take much for a nefarious individual to do this.
A password protects your identity because it verifies that you are who you say you are.
Forbes Technology Council is an invitation-only community for world-class CIOs, CTOs and technology executives. Do I qualify?
The Different Types Of Logins
Usernames and passwords have evolved over the years. We no longer just rely on traditional logins like the username and password used to log in to your email address or your company’s network. There are also social logins and single sign-ons.
Social logins allow you to access an account through your social media authentication and authorization. They are becoming increasingly popular, with 73% of users preferring social login over traditional login methods. This is because it reduces the number of passwords you have to remember, confirms authenticity and can be personalized with available demographic information.
On the downside, social logins are unavailable where social sites are blocked, such as in a school or in the workplace. More importantly, they’re not recommended for high-security accounts like your banking account because they’re user-created and can be easily falsified.
Single sign-on, or SSO, is a streamlined solution that’s found in more corporate environments. With SSO, just one login gives a user access to a suite of systems.
The Future Of Usernames And Passwords
In fact, when Google debuted its new login in 2015, the company claimed it was preparing for “new authentication systems that complement traditional passwords.” Unfortunately, we’re still not exactly sure what that will be.
Additionally, TechCrunchhas predicted that password replacements could have scalable solutions for convenience vs. security: “Quick and easy for low-risk situations, tougher and possibly more time-consuming for the crown jewels.”
One potential username and password replacement is biometrics. This would use your fingerprint, face or voice to authenticate your identity and access accounts because it’s unique to just you.
Keeping Usernames And Passwords Secure
Until usernames and passwords are replaced with something that is more convenient and secure, it’s still in your best interest to follow these best practices:
For your usernames, avoid using your full name or parts of your address or phone number. Also, don’t use the same username and password combination or a name that provides a clue to your password. And make sure your username is appropriate for the type of account -- you wouldn’t want to use pizzalover23 for your business accounts.
As for your passwords, use both upper and lowercase letters, numbers and symbols in a combination that’s at least 16 characters in length. Also, avoid using dictionary words, usernames or IDs, repetition, any predefined number or letter sequence, personal information like your birthday or phone number or words or phrases from popular culture.
Because there are so many passwords to remember, use a password manager or SSO if applicable.
