Passwords are one of the essential building blocks needed to put up a robust modern cyber defense. They serve as gatekeepers not just to the accounts you sign into daily, but also to all the personal and financial information stored and available about you. Just like choosing secure platforms such as best online pokies Australia, having strong and unique passwords is crucial for protecting your online activity.
How were passwords first used, and how did they evolve? Are passwords enough to secure your digital life, and what’s next for them? Join us as we explore the intriguing history and uncertain future of this cybersecurity staple.
A Brief History of Passwords
Like the need to protect access to something, passwords are a concept even ancient civilizations were aware of. For example, it was a common practice in the Roman military to use code words to identify friends or allow entry to restricted zones.
Similarly, throughout the centuries, everyone from warlords to revolutionaries used ciphers and encryption methods to protect the contents of important messages. Seals and signatures were the first means of authentication, ensuring important messages reached only their intended recipients.
The concept of passwords in computing first emerged in the 1960s. Specifically, Dr. Fernando Corbató introduced them as a means for researchers who simultaneously accessed MIT’s shared computer resources to have sole access to the files they were working on.
The advent of personal computing in the 70s introduced passwords to a wider audience. It also made their limitations more apparent, resulting in cybersecurity solutions like hashing and salting, which we still use today.
Along with ushering in the internet, the 1990s gave us the first taste of phishing and other cyberattacks, which the budding hacker scene targeted at unsuspecting users. The 2000s and 2010s saw a widespread rise in data breaches. These not only exposed potentially billions of passwords; they often happened because a password was either stolen or stored incorrectly.
How Have Passwords Evolved?
The first passwords were code words or phrases you’d use to be let through a gate, etc. During WWII, a challenge-response system with phrases and counterphrases became popular to establish mutual authentication and trust.
Since computers weren’t widely accessible, a single word could serve as an effective password as late as the 1980s. Increased computing power and internet use resulted in the first complexity requirements. That’s when the distinction between upper- and lowercase letters, along with the use of symbols, became widespread.
The 2000s kicked off a rise in cyberattacks that hasn’t slowed down since. Password complexity remained important, but websites and companies that stored passwords became more accountable for their security.
Hashing and salting became more widespread, and the algorithms used became more sophisticated. Users were also encouraged to change their passwords frequently, at least once every 90 days. Meanwhile, the gradual shift towards HTTPS ensured passwords remained encrypted while in transit.
As hacking methods in the 2010s grew more sophisticated, it became clear that complexity isn’t a substitute for length. The 2017 version of NIST’s Password Guidelines was the first to emphasize longer, unique passphrases people could remember more easily.
As prominent breaches continued and user awareness grew, the latter half of the 2010s saw the mainstream acceptance of password managers.
They remain a cybersecurity staple because users have to remember only the master password, while the manager creates complex, unique passwords for their other accounts. The manager can also fill in those passwords automatically from different devices and securely share them with others.
The Fallibility and Future of Passwords
Despite these advances, passwords need to be supplemented with other security measures. Two-factor and multifactor authentication have become standard. They make accounts more secure by requiring an extra form of verification before granting access.
Mobile VPNs are another effective safeguard, especially when using public networks that are easy to compromise. They encrypt and shield your connection, ensuring no passwords you either enter or transmit can be identified or misused.
Passkeys are a promising alternative that may eventually supplant passwords entirely. They’re made up of a key pair – a public key held by the issuer and a private one stored on your device. Verification is seamless, and no password gets stored anywhere. You won't have to remember any credentials, and you can't accidentally expose them if you fall for a phishing attack.
We’re still in the early stages of passkey adoption. However, major players like Apple, Google, and Microsoft have voiced their support, and the number of websites and services that use passkeys is growing.
