No More ‘Change Your Password Day’!

No more 'change your password day'!

In early February, we celebrated Change Your Password Day. I have to admit that, once again, I missed it. And I hope you will too…

I’m already explaining why.

The concept of changing passwords has its roots back in the days when we worked in UNIX environments, which initially stored our “secrets,” admittedly in encrypted form, but accessible to everyone. This means, more or less, that anyone could try to decipher another person’s password. And since it took – depending on the length of the password and its complexity – from minutes to several months, various tutorials urged us to change our secret word periodically. Later, in the era of the popularization of the Internet, especially the early Web, passwords were sent in unclassified form. And this same good practice was supposed to protect us from situations where passwords could be intercepted and used by someone.

Since then, however, much has changed. We don’t work in terminal environments, the HTTP protocol has become HTTPS, with an extra “S” for “Secure” (among other things, signifying the security of our passwords). Unfortunately, the changes have also gone in the wrong direction. The abundance and value of the data found on the network have caused criminals to develop a number of mechanisms to seize it easily. The most common and first step in this direction is to learn our password by suspecting, eavesdropping, stealing, phishing, guessing, or decrypting it.

Fortunately, today we no longer have to rely on the password alone. This is because other, more secure, and often more convenient methods of confirming identity online, or so-called authentication, have been developed. These are mechanisms based on what we carry with us – for example, flash drive-like dongles or mobile smartphones equipped with appropriate applications that verify our identity based on our biometric characteristics. After all, with the relatively recent introduction of iOS or Android phones, we mainly unlock with a fingerprint or facial image, possibly a short PIN, rather than a complicated password. This functionality – not without reason, after all – is increasingly being taken over by personal computers and the operating systems that run on them.

No more change your password day 01
No more ‘change your password day’!

Changing the password periodically thus loses its meaning. And instead of remembering the obsolete, like the password itself, on the day of its celebration, I suggest that we use other means of authentication. And this happens every day and in every service where we have our account.

Krzysztof Góźdź drives sales and new business development. Krzysztof has more than 20 years of experience in Information Technology & Services sales and has previously worked for IBM and Hewlett-Packard bringing on board enterprise customers and cooperating with them. Read More


We are faced with new challenges every day. We must always be one step ahead of the attackers and know what they are going to do before they do it. We are convinced that the User Access Security Broker will bring security to a new level, both for those working at the office and from home. For us, working with Secfense is an opportunity to exchange experience with developers who put great value on out-of-the-box thinking.

Krzysztof Słotwiński

Business Continuity and Computer Security Officer

BNP Paribas Bank Poland

As part of the pre-implementation analysis, we verified that users utilize a wide range of client platforms: desktop computers, laptops, tablets, smartphones, and traditional mobile phones. Each of these devices differs in technological advancement, features, and level of security. Because of this, and also due to the recommendation of the Polish Financial Supervision Authority (UKNF), we decided to introduce additional protection in the form of multi-factor authentication mechanisms based on FIDO. As a result, users of our applications can log in safely, avoiding common cyber threats such as phishing, account takeover, and theft of their own and their clients’ data.

Marcin Bobruk



We are excited to partner with Secfense to enhance our user access security for our web apps. By integrating their User Access Security Broker, we ensure seamless and secure protection for our applications and systems, delivering superior security and convenience to our customers.

Charm Abeywardana

IT & Infrastructure

Visium Networks

Before investing in Secfense, we had the opportunity to talk to its existing clients. Their reactions were unanimous: wow, it’s so easy to use. We were particularly impressed by the fact that implementing their solution does not require the involvement of IT developers. It gives Secfense a huge advantage over the competition, and at the same time opens the door to potential customers who so far were afraid of changes related to the implementation of multi-factor authentication solutions.

Mateusz Bodio

Managing Director


Even when the network and infrastructure are secured enough, social engineering and passwords can be used to gain control of the system by attackers. Multifactor authentication is the current trend. Secfense addresses this and allows you to build zero trust security and upgrade your current systems to passwordless applications within minutes, solving this problem right away,” said Eduard Kučera, Partner at Presto Ventures and cybersecurity expert – former Director in hugely successful Czech multinational cyber security firm Avast.

Eduard Kučera


Presto Ventures

One of the biggest challenges the world is facing today is securing our identity online. That’s why we were so keen to have Secfense in our portfolio. They make it possible to introduce strong authentication in an automated way. Until now, organizations had to selectively protect applications because the deployment of new technology was very hard, or even impossible. With Secfense, the implementation of multi-factor authentication is no longer a problem, and all organizations can use the highest standards of authentication security.

Stanislav Ivanov

Founding Partner

Tera Ventures

Two-factor authentication is known to be one of the best ways to protect against phishing; however, its implementation has always been difficult. Secfense helped us solve that problem. With their security broker, we were able to introduce various 2FA methods on our web applications at once.

Dariusz Pitala

Head of IT