--- title: Why Password Policies aren't Enough description: Password policies are important but are they enough? Read this blog to discover how you can effectively secure your assets. Discover the importance of layered security and sign up for our free IT assessment. image: https://marketing.pinecc.com/hubfs/login-570317_1920.jpg --- - [MT Cybersecurity Report](http://www.pinecc.com/montana-cyber-security-report) - [Technology News & Blog](https://marketing.pinecc.com/blog) - [Partners](http://www.pinecc.com/partners) - [Careers](http://www.pinecc.com/pine-cove-careers) [![Pine Cove Consulting](https://marketing.pinecc.com/hs-fs/hubfs/Website/pcc_logo_lrg_color_transparent.png?width=576&height=288&name=pcc_logo_lrg_color_transparent.png "Pine Cove Consulting")](http://www.pinecc.com) - Solutions - [Cybersecurity](http://www.pinecc.com/cyber-security) - [Infrastructure](http://www.pinecc.com/infrastructure) - [Communication](http://www.pinecc.com/communication) - [Physical Security](http://www.pinecc.com/physicalsecurity) - [Student Safety](http://www.pinecc.com/student-safety) - [User Security](http://www.pinecc.com/user-security) - IT Services - [Budgeting/Sustainability Planning](http://www.pinecc.com/budgeting) - [Support Services](http://www.pinecc.com/support) - About Us - [History](http://www.pinecc.com/about) - [Our Team](http://www.pinecc.com/team) - [Community Involvement](http://www.pinecc.com/community) - [Case Studies](http://www.pinecc.com/casestudies) [![Contact Us](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/164718/216a4af8-6258-4cec-943b-457d7f5f275e.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/164718/216a4af8-6258-4cec-943b-457d7f5f275e) # Why Password Policies aren't Enough [![Jace Holyoak](https://marketing.pinecc.com/hubfs/Website/Team/Cartoons/PCC_06-JaceHolyoak_HQ.jpg) Jace Holyoak](https://marketing.pinecc.com/blog/author/jace-holyoak) ![Topic](https://cdn2.hubspot.net/hubfs/685080/HubSpot_Template_Marketplace/Cobalt%20Modular/icons/co-topic.svg) [Cybersecurity](https://marketing.pinecc.com/blog/topic/cybersecurity) ![Date Published](https://cdn2.hubspot.net/hubfs/685080/HubSpot_Template_Marketplace/Cobalt%20Modular/icons/co-calendar.svg) Feb 22, 2018 3:55:40 PM ![Reading Time](https://cdn2.hubspot.net/hubfs/685080/reading-time.svg) Reading Time: 1 min Share: [ ](https://www.facebook.com/share.php?u=https://marketing.pinecc.com/blog/why-password-policies-arent-enough) [ ](https://www.linkedin.com/shareArticle?mini=true&url=https://marketing.pinecc.com/blog/why-password-policies-arent-enough) [ ](https://twitter.com/intent/tweet?original_referer=https://marketing.pinecc.com/blog/why-password-policies-arent-enough&url=https://marketing.pinecc.com/blog/why-password-policies-arent-enough&source=tweetbutton&text=Why%20Password%20Policies%20aren't%20Enough) ![Password Policy](https://marketing.pinecc.com/hubfs/login-570317_1920.jpg) ![Password Policy](https://marketing.pinecc.com/hs-fs/hubfs/login-570317_1920.jpg?width=658&name=login-570317_1920.jpg "Password Policy")No matter how much training your users have received regarding cyber-security, it has been proven time and time again that they are the biggest threats to your cyber defense. Users are not good at choosing passwords. The [most commonly used password of 2017](http://fortune.com/2017/12/19/the-25-most-used-hackable-passwords-2017-star-wars-freedom/), "123456", has now held the number one position for four consecutive years. In an effort to combat this, many companies now require you to use characters such as numbers, capitalization, special characters (!@#$%^&\*), and more to "secure" your password. Because it is harder for users remember these passwords compared to their previous password of their birthday, dog's name, or favorite sports team, they usually do one of two things: 1. Record their passwords on their computer so they can pull it up when necessary 2. Use the newly created password universally for all of their accounts. Both of these practices are dangerous and really show that no matter what password policy you have in place, it isn't enough. [Two in every five people](https://www.entrepreneur.com/article/246902) have a password stolen from them each year. 54% of users have five or fewer passwords across their entire life. 21% of people use passwords that are over 10 years old. Needless to say, if your password gets stolen, you could be in big trouble. If you've recently faced a cyber attack and been given the advice of implementing a password policy, just know that it is not enough. Creating complex passwords have their place but don't assume it's a catch all when it comes to cyber-security. Enter layered internet security... ## Introducing Layered Internet Security Users are facing cyber attacks from all vantage point including [phishing](https://marketing.pinecc.com/blog/top-3-phishing-attacks-types-of-cyber-attacks), [smart technology](https://marketing.pinecc.com/blog/are-your-toys-listening-to-you-smart-toys-pose-cyber-security-concerns), [network attacks](https://marketing.pinecc.com/blog/5-network-security-risks-to-prepare-for-types-of-cyber-attacks), [mobile devices](https://marketing.pinecc.com/blog/why-mobile-device-protection-is-important-byod-security-risks), [malware/ransomware](https://marketing.pinecc.com/blog/3-major-types-of-cyber-attacks-descriptions-examples-prevention), and more. Protection from these attacks demands layered security. Layered security is the process of protecting your assets at every layer of technology. For example, a layered cyber-security system would include a firewall, endpoint protection, mobile protection, anti-virus, and more. Organizations must continue to take proactive steps to prevent cyber attacks, such as education and policies for things like passwords, but they must assume and prepare for the worst. There is only so much you can do to prevent a cyber-attack which is why it is necessary to have defenses in place to protect your assets in the event of a cyber breach.  Want to see how your cyber-security stacks up? Sign up for our Free IT Assessment: [![Free IT Assessment](https://hubspot-no-cache-na2-prod.s3.amazonaws.com/cta/default/164718/4ffde92a-b064-4a2d-8661-32688bf6c524.png)](https://hubspot-cta-redirect-na2-prod.s3.amazonaws.com/cta/redirect/164718/4ffde92a-b064-4a2d-8661-32688bf6c524) [Next Cryptojacking: What is it and how you can fight back](https://marketing.pinecc.com/blog/cryptojacking-what-is-it-and-how-you-can-fight-back) [BLOG](https://marketing.pinecc.com/blog) [Previous Intercept X becomes even more sophisticated](https://marketing.pinecc.com/blog/intercept-x-becomes-even-more-sophisticated) ### **You may also be Interested in the Following Blogs:** 6 November, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ##### [Our 5-Step Process](https://marketing.pinecc.com/blog/5-step-process) Pine Cove Consulting’s 5-step process ensures seamless Wi-Fi for institutions by optimizing performance, reliability, and long-term support. Through a strategic partnership with RUCKUS Networks, Pine Cove analyzed, designed, deployed, and continues to support... [Read more](https://marketing.pinecc.com/blog/5-step-process) 24 October, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ##### [Highlights from Verkada One 2024](https://marketing.pinecc.com/blog/highlights-from-verkada-one-2024) In October 2024, Denver was buzzing with the latest in physical security at the highly anticipated [Verkada One Conference](https://www.verkada.com/blog/announcing-verkadaone-2024/). This three-day event attracted over 1,600 attendees, including industry leaders, technology innovators, and key partners. Verkada didn’t... [Read more](https://marketing.pinecc.com/blog/highlights-from-verkada-one-2024) 16 October, 2024 ![author](https://cdn2.hubspot.net/hubfs/685080/author.png) [Eddie the Sasquatch](https://marketing.pinecc.com/blog/author/eddie-the-sasquatch) ![topic](https://cdn2.hubspot.net/hubfs/685080/topic.png) [Newsletter](https://marketing.pinecc.com/blog/topic/newsletter) ##### [Trail Report: It's Cybersecurity Awareness Month!](https://marketing.pinecc.com/blog/october-2024-trail-report) Welcome IT dwellers, it’s October and I’m here to tell you what’s new in the IT sphere. Here’s what’s been on my mind lately: - MFA - CISO job security concerns - Biometric access control [Read more](https://marketing.pinecc.com/blog/october-2024-trail-report) ## Follow Pine Cove On Social Media For news, satire, and information. [ ](https://www.facebook.com/Pinecoveconsulting) [ ](https://www.linkedin.com/company/pinecoveconsulting/) [ ](https://twitter.com/PINECC) [ ](https://www.youtube.com/user/Pinecoveconsulting) ![Screenshot 2023-02-16 at 1.11.58 PM](https://marketing.pinecc.com/hs-fs/hubfs/Screenshot%202023-02-16%20at%201.11.58%20PM.png?width=103&height=175&name=Screenshot%202023-02-16%20at%201.11.58%20PM.png "Screenshot 2023-02-16 at 1.11.58 PM") ![2022 VERKADA](https://marketing.pinecc.com/hs-fs/hubfs/2022%20VERKADA.png?width=500&height=500&name=2022%20VERKADA.png "2022 VERKADA") ![2022 MSP 500](https://marketing.pinecc.com/hubfs/2022%20MSP%20500.png "2022 MSP 500") ![2022 CRN 100](https://marketing.pinecc.com/hubfs/2022%20CRN%20100.png "2022 CRN 100") ![2021 SOPHOS PARTNER](https://marketing.pinecc.com/hubfs/2021%20SOPHOS%20PARTNER.png "2021 SOPHOS PARTNER") ![2021 CRN MSP](https://marketing.pinecc.com/hubfs/2021%20CRN%20MSP.png "2021 CRN MSP") **Products** --- - [Cyber Security](http://www.pinecc.com/cyber-security) - [Physical Security](http://www.pinecc.com/physicalsecurity) - [Network Infrastructure](http://www.pinecc.com/infrastructure) - [Communication](http://www.pinecc.com/communication) - [User Security](http://www.pinecc.com/user-security) - [Student Safety](http://www.pinecc.com/student-safety) **Services** --- - [Support Services](http://www.pinecc.com/support) - [IT Budgeting](http://www.pinecc.com/budgeting) **About Us** --- - [Contact Us](http://www.pinecc.com/contact) - [About Us](http://www.pinecc.com/about) - [Community Involvement](http://www.pinecc.com/community) - [Technology Leadership Program](http://www.pinecc.com/scholarship) - [Tech News & Blog](https://marketing.pinecc.com/blog) - [FAQ](http://www.pinecc.com/faq) - [Careers](http://www.pinecc.com/pine-cove-careers) Copyright © [Pine Cove Consulting](http://www.pinecc.com/) [](https://www.linkedin.com/company/pinecoveconsulting) [](https://www.facebook.com/Pinecoveconsulting) [](https://twitter.com/PINECC) [](https://www.youtube.com/user/Pinecoveconsulting) ```json { "@context" : "https://schema.org", "@type" : "BlogPosting", "author" : { "@type" : "Person", "name" : "Jace Holyoak", "url" : "https://marketing.pinecc.com/blog/author/jace-holyoak" }, "datePublished" : "2018-02-22T22:55:40.000Z", "headline" : "Why Password Policies aren't Enough", "image" : [ "https://marketing.pinecc.com/hubfs/login-570317_1920.jpg" ], "mainEntityOfPage" : { "@id" : "https://marketing.pinecc.com/blog/why-password-policies-arent-enough", "@type" : "WebPage" }, "publisher" : { "@type" : "Organization", "logo" : { "@type" : "ImageObject", "url" : "https://marketing.pinecc.com/hubfs/Website/pcc_logo_lrg_color_transparent.png" }, "name" : "Pine Cove Consulting" } } ```