Aren’t All Target Date Retirement Funds the Same? Spoiler Alert: No

Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can cause risk since much of those details can be discovered by a simple examination of social media.

Creating strong passwords offers greater security for minimal effort. Weak passwords can compromise the best security tools and controls. With a never-ending list of applications and services that users and consumers access, people may have dozens of passwords to maintain at any given time. Often, the temptation to use familiar terms such as pet names, favorite teams or the names of children or friends can
cause risk since much of those details can be discovered by a simple examination of social media.

Under Lock and Key
You can buy a small padlock for less than a dollar—but you should not count on it to protect anything of value. A thief could probably pick a cheap lock without much effort, or simply break it. And yet, many people use similarly flimsy passwords to “lock up” their most valuable assets, including money and confidential information. Fortunately, everyone can learn how to make and manage stronger passwords. It is an easy way to strengthen security both at work and at home.

What Makes a Password ‘Strong’?
Let’s say you need to create a new password that’s at least 12 characters long, and includes numerals, symbols, and upper- and lowercase letters. You think of a word you can remember, capitalize the first
letter, add a digit, and end with an exclamation point. The result: Strawberry1!

Unfortunately, hackers have sophisticated password-breaking tools that can easily defeat passwords based on dictionary words (like “strawberry”) and common patterns, such as capitalizing the first letter.
Increasing a password’s complexity, randomness, and length can make it more resistant to hackers’ tools. For example, an eight-character password could be guessed by an attacker in less than a day, but a 12-character password would take two weeks. A 20-character password would take 21 centuries. You can learn more about creating strong passwords in your organization’s security awareness training. Your organization may also have guidelines or a password policy in place.

Why Uniqueness Matters
Many people reuse passwords across multiple accounts, and attackers take advantage of this risky behavior. If an attacker obtains one password—even a strong one—they can often use it to access other valuable accounts.

Here is a real-life example: Ten years ago, Alice joined an online gardening forum. She also created an online payment account and used the same password. She soon forgot about the gardening forum, but someone accessed her payments account years later and stole a large sum of money.

Alice did not realize the gardening forum had been hacked, and that users’ login credentials had been
leaked online. An attacker probably tried reusing Alice’s leaked password on popular sites—and
eventually got lucky.

Guarding Your Passwords & PINS. Passwords and PINS protect sensitive data and it's critical to keep them safe. Try these best practices to stay protected.

1. Do not write them down – Many make the mistake of writing passwords on post-it notes and
leaving them in plain sight. Even if you hide your password, someone could still find it. Similarly, do
not store your login information in a file on your computer, even if you encrypt that file.
2. Do not share passwords – You cannot be sure someone else will keep your credentials safe. At
work, you could be held responsible for anything that happens when someone is logged in as you.
3. Do not save login details in your browser – Some browsers store this information in unsafe
ways, and another person could access your accounts if they get your device.
4. Use a password manager – These tools can securely store and manage your passwords and
generate strong new passwords. Some can also alert you if a password may have been
compromised.
5. Never reuse passwords – Create a unique, strong password for each account or device. This
way, a single hacked account does not endanger other accounts.
6. Create complex, long passwords – Passwords based on dictionary words, pets’ names, or other
personal information can be guessed by attackers.

In 2001, the Securities and Exchange Commission (SEC) adopted a new rule to supposedly prohibit mutual fund names that may mislead investors about a fund’s investments and risks. The rule required a fund with a name suggesting that the fund focuses on a particular type of investment (e.g., “stocks” or “bonds”) to invest at least 80% of its assets accordingly. Previously, funds were subject to a 65% investment requirement.

This rule resulted in many funds changing their names, changing their investments, or both. In general, things are better now than they were before the 2001 rule. However, today’s mutual fund names and categories can still be confusing and/or misleading.

Blurred Boundaries

For example, let’s look at names that connote where the fund buys its investments. These names usually contain words like “Domestic,” “International,” “Global,” and “World.” Imagine a Domestic Large-Cap fund, whose name suggests it buys large, U.S. companies. But if the fund owns mostly companies in the S&P 500 Index, those companies might be generating up to 50% of their revenues outside of the U.S. The large multinational firm might be based in the U.S. but do business in countries all around the world. The opposite may be true of funds with “Global” or “World” in their name; those companies based in foreign countries may be deriving some or all of their revenue from dealings with the U.S.

Undefined Jargon

Another confusing category of funds is called “smart beta”. Investopedia defines Beta this way1:

“Beta is a measure of the volatility, or systematic risk, of a security or a portfolio in comparison to the market as a whole. Beta is used in the capital asset pricing model (CAPM), which calculates the expected return of an asset based on its beta and expected market returns.”

Got that? Let’s assume you totally understand beta and CAPM. So, what is “smart” beta? If beta is a measure of volatility, then a reasonable person might assume that “smart beta” is a more intelligent measure of volatility, right? Let’s see if the definition of smart beta contains the word “volatility.”

Investopedia defines smart beta this way2:

The goal of smart beta is to obtain alpha, lower risk or increase diversification at a cost lower than traditional active management and marginally higher than straight index investing. It seeks the best construction of an optimally diversified portfolio. In effect, smart beta is a combination of efficient-market hypothesis and value investing. Smart beta defines a set of investment strategies that emphasize the use of alternative index construction rules to traditional market capitalization-based indices. Smart beta emphasizes capturing investment factors or market inefficiencies in a rules-based and transparent way. The increased popularity of smart beta is linked to a desire for portfolio risk management and diversification along factor dimensions, as well as seeking to enhance risk-adjusted returns above cap-weighted indices.

Hmm. Not a single mention of volatility. Are you confused yet?

Growth, Aggressive Growth, Capital Appreciation, Equity Income

Growth sounds good, but how is it different from capital appreciation? Don’t they mean the same thing? Does aggressive mean faster, riskier, meaner, or something else? Equity income funds are supposed to be stocks that pay dividends, right? So, what category do you think the Dividend Growth Small & Mid-Cap Fund3 is? It has both “dividend” and “growth” in its name, but are they separate or together? Does the fund invest in companies whose dividends are growing, or does it invest in growth companies that also pay dividends? An investor would need to read the fund’s prospectus to find out for sure. I’m sure all good investors thoroughly read those prospectuses from cover to cover.

Reporting Problem

The SEC requires mutual funds to report complete lists of their holdings on a quarterly basis. So, the manager of the hypothetical Blah-Blah Domestic Large Cap Fund could buy a bunch of foreign small-cap stocks on January 1 and hold them until March 28. Then, the manager could sell them and replace them with domestic large-cap stocks, and report on March 31 that the fund was properly holding domestic large cap stocks as required. On April 1, the manager could buy back the foreign small cap stocks and repeat that process every quarter.

Conclusion

Mutual fund names and categories are more informative than they used to be, but they can still be quite confusing or misleading. Investors (and advisors) need to do their due diligence, fully read those prospectuses, and closely follow the actions of the fund managers. Is your advisor recommending mutual funds? Are they confident of what’s really in those funds? Are you? If you have any questions about the mutual funds in your portfolio, email me at steve.hartel@trilogyfs.com and I if I can’t answer your question, I will find someone who can.

1. https://www.investopedia.com/terms/b/beta.asp
2. https://www.investopedia.com/terms/s/smart-beta.asp