Three Reasons Why You Should Use BlindHashing to Protect Your Passwords

July 12, 2017

Cybersecurity is constantly changing making it difficult to ensure your data and passwords are secure.  As a consumer, it is becoming increasingly onerous to remember your password with the various password combination rules required.  As a business with a login page, the PR nightmare that ensues when a breach occurs makes it critical to have the proper cyber security plan in place.

For many years, best practice has been to protect passwords by using computational power to slow down the hashing process.  However, with all of the complex hashing techniques available today, one thing is forgotten; where the actual password is stored.  This is where BlindHash comes into play.  When BlindHash is implemented as an additional tool to your password security defense network, passwords become virtually impossible to be stolen via an offline dictionary attack.

SO WHY SHOULD YOU USE BLINDHASH? THE BETTER QUESTION IS ...

REASON #1 - BlindHash can save you BIG MONEY, just ask Yahoo how they lost $350M: In 2013 & 2014, Yahoo suffered major breaches that ended up costing them over $350 million in their sale to Verizon. Sure Yahoo is a huge company, but the cost of a data breach can be catastrophic to any business.  In the Ponemon Institute's 2017 Cost of a Data Breach Study, the average cost to a company is $3.62M or $141 per stolen record. One thing we can count on is that data breaches are not going away, so we must take all pre-cautions to prevent any attack. BlindHash's patented technology should be a piece to everyone's cyber security defense system because it negates the threat of an offline attack. 

REASON #2 - BlindHash makes Consumers Happy: Consumers today are tired of hearing that their password must be eight characters long, include a symbol, number and a capital letter. Only to then be told that they can't use the same password they have on other websites and they must change it every 90 days.  It's no surprise that password resets receive the largest call volumes at support help desks. And let's face it, most consumers are going to use the same password on multiple sites, so businesses should do everything they can to properly secure their user's passwords. By using BlindHash, you make your passwords virtually impossible to steal via an offline attack.  The result being that customers are more protected and you eliminate the need for password resets even if your internal database is compromised.

Reason #3 - BlindHash is a Simple Add On to Your Existing Security Defense Combination: In most cases BlindHash is a plugin to your existing web platform. However, BlindHash can easily be added to any custom or commercial platform as well. It usally takes less than 30 minutes to install and is a very affordable addition to your existing defense mechanisms.  But the best part is, it's invisible to the end-user and causes zero interruption in your daily activities. BlindHashing is an easy decision and should be included in every cybersecurity plan.

Want to learn more about how our technology works? Download our whitepaper. Technology Overview Download