Password Practices at Businesses Fall Short of Secure
More than half (56 percent) of the survey respondents admitted to some level of daily password reuse for the corporate applications they access.One in five U.S. employees would sell their passwords – some for as little as $150, according to a survey by security specialist SailPoint. The global survey of 1,000 employees at large organizations also confirmed that employees are lax about password management in general. "Basically, passwords are poorly managed in many enterprises. The reality is that passwords are not going away – in fact they are flourishing,” said SailPoint president Kevin Cunningham. Today’s end user has dozens of passwords they have to remember on a daily and even hourly basis. They compensate by choosing easy-to-remember, and easy-to-guess, passwords, or reusing the same password across multiple applications, or writing them down on sticky notes stuck to their computers." Cunningham said that poses a significant risk to sensitive corporate data, which highly-publicized recent data breaches illustrate. Specifically, one in five employees routinely share login information for corporate applications with other members of their team, which increases the potential that the passwords they sell might not even be their own.
Compounding the problem, 56 percent of respondents admitted to some level of daily password reuse for the corporate applications they access, with many as 14 percent of employees using the same password across all applications.