Tuesday, December 4, 2018

IR-2018-241: Security Summit Partners highlight new password guidance, urge taxpayers and practitioners to protect all accounts

Bookmark and Share

IRS.gov Banner
IRS Newswire December 4, 2018

News Essentials

What's Hot

News Releases

IRS - The Basics

IRS Guidance

Media Contacts

Facts & Figures

Around The Nation

e-News Subscriptions


The Newsroom Topics

Multimedia Center

Noticias en Español

Radio PSAs

Tax Scams

The Tax Gap

Fact Sheets

IRS Tax Tips

Armed Forces

Latest News Home


IRS Resources

Compliance & Enforcement

Contact My Local Office

Filing Options

Forms & Instructions

Frequently Asked Questions

News

Taxpayer Advocate

Where to File

IRS Social Media


Issue Number:    IR-2018-241

Inside This Issue


Security Summit Partners highlight new password guidance, urge taxpayers and practitioners to protect all accounts

WASHINGTON – To help protect against cybercriminals stealing identities, the IRS, state tax agencies and the nation's tax industry urged people to review new, stronger standards to protect the passwords of their online accounts.

Every individual or tax practitioner who maintains any type of online accounts should use strong passwords to protect against savvy cybercriminals taking over their identities and accessing sensitive tax and financial data.

But there's been some new thinking as to what a strong password is. The latest guidance suggests using a passphrase such as a favorite line from a movie or a series of associated words rather than using a password. The idea is to create a passphrase that can be remembered easily and protect the account. This means passwords like – "uE*s3P%8V)" – are out. Longer, personal phrases people can remember – for example, SunWalkRainDrive – are now preferred.

The Internal Revenue Service, state tax agencies and the tax community, partners in the Security Summit, are marking "National Tax Security Awareness Week," Dec. 3-7, with a series of reminders to taxpayers and tax professionals. In part three, the topic is creating a strong password.

This is especially important for taxpayers and tax professionals who use online accounts involving financial data or even their online account with the IRS or a tax software provider.

"The IRS and the Security Summit partners have strengthened our systems to help protect against tax-related identity theft," said IRS Commissioner Chuck Rettig. "To make these defenses even stronger, we need taxpayers and tax professionals to take common-sense steps to protect their data and make it harder for identity thieves. By using better passwords, people can help themselves and the tax community against identity theft."

The IRS, like all federal agencies, follows the cybersecurity framework set by the National Institute of Standards and Technology or NIST, which is a branch of the Department of Commerce. NIST last year rethought its guidance on passwords.

NIST suggested these three steps to build a better password:

  • Step 1 –  Leverage your powers of association. Identify associated items that have meaning to you.
  • Step 2 – Make the associations unique to you. Passphrases should be words that can go together in your head, but no one else would ever suspect. Good example: Items in your living room such as BlueCouchFlowerBamboo. Bad example: Names of your children.
  • Step 3 – Picture this. Create a passphrase that you can picture in your head. In our example, picture items in your living room. The key is to create a passphrase that is hard for a cybercriminal to guess but easy for you to remember.

In addition to creating strong passwords, the Security Summit urges taxpayers and tax practitioners to take these additional steps:

  • Use a different password or passphrase for each account; use a password manager if necessary for multiple accounts.
  • Use multi-factor authentication whenever possible. Don't rely on the passphrase alone to protect sensitive data. Multi-factor authentication means returning account holders need more than just their credentials (username and password) to access an account. They also need, for example, a security code sent as text to a mobile phone. Email providers and social media outlets, such as Facebook, offer multi-factor authentication options. For tax professionals, some tax software providers will offer multi-factor authentication as an option, and practitioners should use it if it's available.
  • Change all factory-set passwords for wireless devices such as printers and routers. Again, use strong passphrases to protect access to these devices, which further safeguards sensitive data.

The IRS, state tax agencies and the tax industry are committed to working together to fight against tax-related identity theft and to protect taxpayers. But the Security Summit needs help. People can take steps to protect themselves online.

Taxpayers can visit the "Taxes. Security. Together." awareness campaign or review  IRS Publication 4524, Security Awareness for Taxpayers, for additional steps to protect themselves and their data from identity theft. Tax professionals can get more information through the Protect Your Clients; Protect Yourself campaign as well as the Tax Security 101 series.

Back to Top


FaceBook Logo     Twitter Logo     LinkedIn Logo     YouTube Logo     IRS2go Logo


Thank you for subscribing to the IRS Newswire, an IRS e-mail service.

If you know someone who might want to subscribe to this mailing list, please forward this message to them so they can subscribe.

This message was distributed automatically from the mailing list IRS Newswire. Please Do Not Reply To This Message.

 


This email was sent to business.solutions.ve@gmail.com by: Internal Revenue Service (IRS) · Internal Revenue Service · 1111 Constitution Ave. N.W. · Washington DC 20535 GovDelivery logo

No comments:

Post a Comment