Employee Password Security

Protect your business one login at a time.

Your employees use passwords every day to access email, financial accounts, business applications, cloud storage and other important systems. If just one set of credentials falls into the wrong hands, it could put more than an individual account at risk.

Why password security matters.

 
Cybercriminals don't always need to "hack" their way into a business. Sometimes, they simply log in using credentials they've stolen or tricked an employee into providing.
 
Once credentials are compromised, criminals may attempt to access email, sensitive information or other systems available to that employee. The best defense is making password security part of your everyday business practices.




Use Strong, Unique Passwords

Reusing passwords across multiple accounts creates additional risk. If one account is compromised, criminals may try those same credentials elsewhere.

Encourage employees to:

  • Use a unique password for every account
  • Make passwords long and difficult to guess
  • Never share passwords through email or text
  • Change passwords promptly if compromise is suspected
 
Make it easier with a password manager.
Keeping track of unique passwords can be difficult. A reputable password manager can generate and securely store passwords, making it easier for employees to avoid weak or reused credentials.

Add Another Layer With MFA

Multi-factor authentication (MFA) requires another form of verification in addition to a password. That extra step can help protect an account even if a password is stolen.

Consider enabling MFA on:

  • Business email
  • Online financial accounts
  • Accounting and payroll systems
  • Cloud storage
  • Remote access
  • Other accounts containing sensitive information
Businesses should require MFA wherever possible and use stronger, phishing-resistant MFA options when available.

Watch for Credential Theft

Criminals may use phishing emails, fake websites or fraudulent login pages to trick employees into providing usernames, passwords or other information.

Before entering your credentials, stop and ask:

  • Was I expecting this request?
    Unexpected requests to sign in, reset a password or verify an account deserve a second look.
  • Am I on the legitimate website?
    Instead of clicking an unexpected link, go directly to the website or app you normally use.
  • Did I initiate this MFA request?
    Never approve an authentication request you didn't initiate.



















Think a Password Has Been Compromised?

 
  • Notify your company's IT or security team.
  • Change the affected password through the legitimate website or app.
  • Change it anywhere else it was reused.
  • Review the account for suspicious activity.
  • Follow your company's incident response procedures.

If you believe your Cornhusker Bank business account may be involved, contact us right away so we can help determine the appropriate next steps.

 

Contact Us

 

Learn more about other types of fraud.