What are the best practices for a safe password?

At RSS.com, we take security very seriously.

We do not store user credentials or passwords in our database. We delegate authentication to a state-of-the art service called Cognito by Amazon Web Services. 

Data within Amazon Cognito is encrypted at rest in accordance with industry standards. Additionally, Cognito does not store passwords; it stores verifiers with AES 256 encryption and salt resulting from the Secure Remote Password (SRP) protocol. As a result, Cognito is compliant with multiple programs including SOC, PCI, FedRAMP, HIPAA, among others.

RSS.com security requires at minimum a password at least 8 characters long with one or more uppercase letter, one or more lowercase letter, and one or more number. Symbols are allowed, but optional. We suggest you use more than the minimum requirements when creating a password. 

The keys to a highly secure RSS.com account:

- Create a randomly generated password at least 15 characters long

- Use multiple symbols, uppercase letters, lowercase letters, and numbers.

- Make sure you do not reuse your password for RSS.com with any other service.

Let's apply the above password suggestions to an example:

You have created a password for use exclusively on RSS.com. Your password is composed of 15 characters and includes symbols, uppercase letters, lowercase letters, and numbers (something like 2J'Y4{n)e5h0XV0). It would take 4747561509942999819332091904 combinations to crack (entropy: 91.94 bits), which would require over $1 billion US dollars in computation costs and over a century to brute force. 

If you follow the above recommendations, your account will be extremely safe.