Navigation and service

Protection for Online Accounts

Secure passwords and two-factor authentication

Do you put on a seat belt when you get in a car? Do you lock the door when you leave the house? It is just as important for you to protect your digital identity, that is, the personal data relating to you that is stored on the Internet. The more online services we use, the more information we divulge about ourselves. It is worth you taking a couple of minutes to put some precautions in place and make things more secure.

The password issue

We've all been there. You want to just quickly use an online service, but you're asked to sign up for an account. OK, so you click through the sign-up process at speed, accept the terms and conditions, and then you're asked to create a password — sometimes having to meet specific criteria, sometimes not. Security should always come before speed in these situations. Here are a few tips to help you create a secure password. And if you find you simply end up with too many different accounts, consider using a password manager.

Using a second factor when logging in

Whether it's online shopping, e-mails, online banking or social networks — when using online services and applications that can store a great deal of personal data, you need the authentication process to be as secure as possible. The idea is to ensure only an authorised person can access an account and its functions. In the past, personal access data consisted of just a user name and password combination, whereas nowadays, there are lots of other secure ways of logging in to an online account.

In general, the BSI recommends two-factor authentication. This type of login is done in two steps, with the service first requesting the password, followed by a code (sent to a different device you own), a fingerprint scan or a USB token, for example, to verify your identity. It is important to find out whether two-factor authentication is possible before you start to use a new application, service or device. It makes everything so much more secure.

The BSI is currently running a project together with the 'wirksam regieren' ('citizen-centred government') unit of the Federal Chancellery to examine users' fears, needs and the challenges they face when it comes to the issue of account protection. The project will probe questions such as what are the specific obstacles preventing people from protecting their personal accounts (expense, a lack of knowledge, etc.) and how these obstacles can be overcome by providing help and information.

Visit the pages below for all the key information you will need on how to make your online accounts and, therefore, your digital identity more secure.