Why online security is taxing our brains

Nathan Acosta is feeling a little overwhelmed.

The 24-year-old from Raleigh, North Carolina, who works for a financial services firm, is trying his best to keep up with all the passwords and security questions he has to juggle, just to log onto his personal accounts. But sometimes it feels like a losing battle.

It's a battle millions of consumers can identify with. For a while it was just your mother's maiden name, then your first pet, the street you grew up on or the make and model of your first car. As passwords and security questions multiply, so does the potential for things to go wrong, possibly locking you out of your own life.

Unless you're a savant with total recall, you need a system to manage that morphing body of login credentials necessary to navigate your virtual life.

"They ask me about my favorite book, and I can't remember how I answered that five years ago," says Acosta. "If I answer anything wrong, then it's red flags and tons of red tape," he says. "I was born in Winston-Salem, but many programs don't allow hyphens, so then I have to make up a fake city and remember that too."

His answer? An elaborate Excel spreadsheet that's password-protected.

Others go more old-school, like executive coach Darla Arni in Slater, Missouri. "I have an entire notebook that I keep all my passwords in, but its pages are filling up" and becoming increasingly disorganized, says the 55-year-old.

"It's so bad that if anything ever happens to me, my instructions are: Find the password notebook - or you will never be able to access anything of importance ever again."

If you're at your wit's end with the demands for encyclopedic recall, don't despair: Some smartphone apps, like RoboForm, Keeper Password, and PasswordWallet, can help consumers manage password overload.

UMPTEEN PASSWORDS

You may as well get used to the Kafka-esque scenario of constantly having to prove you are who you say you are. According to one Microsoft research paper, the average computer user has 25 online accounts and 6.5 passwords - and that was tabulated back in 2007.

"You might have different logins and passwords for Google, Facebook, Amazon, Flickr, your bank, your favorite retailers, and on and on," says Chenxi Wang, a vice president and security analyst for technology consultants Forrester Research. "If you're trying to remember all the different passwords and security questions and combinations, it can be a challenge - and I haven't yet seen a concerted effort to help consumers manage that challenge."

To be sure, going through several layers of authentication is a good thing for consumers, helping reduce the risk of increasingly sophisticated hackers gaining access to their accounts and emptying them out.

"Today, you have to have multiple levels of security, like those ‘challenge questions' you have to answer whenever you're using a new device," says Keith Gordon, a security, identity and fraud executive with Bank of America. "It's what helps us identify fraudsters in Eastern Europe who have stolen your online credentials."