About 99% of us make two mistakes with passwords:
1. Use the same password on multiple websites; and
2. Do not periodically change the password
If that’s you, read on. You may have read about the “Heartbleed” bug in the past couple of weeks. It seems that for years, the security method used by over half of all websites to pass data to you and back had a bug that allowed hackers to intercept the transmission and get your username and password. This bug was recently made public and websites are scurrying to fix it.
In the case of DomainNameSanity.com’s website, we weren’t subjected to the problems of the Heartbleed bug because we didn’t use the defective software. Therefore, passing your password to our site was secure. However, if the password you use at a website that didn’t have the Heartbleed bug is the same password you used at any other website that did have the bug (and over half the websites did), then it’s possible your password is floating in cyberspace and has gotten into the wrong hands.
If you’ve been told that a website didn’t have a problem with Heartbleed, don’t get lulled into a false sense of security if that same password was used by you anywhere else on the Internet.
If you want to check if a website has a problem with Heartbleed now, you can do that at this link:
However, almost all websites have fixed the problem by now. Therefore, just because it’s safe today, doesn’t mean it wasn’t vulnerable at some point over the past couple of weeks.
This is a wake-up call. It’s time for all of us to get serious about passwords and change them periodically and keep them unique to different websites.