How to Create Strong Passwords (and Actually Remember Them)

If you use the same password for everything — or your password is something like your pet's name or your birthday — you are not alone. Most people do it. But it is also one of the easiest ways for hackers to get into your accounts.

The good news: you do not need to be a tech expert to protect yourself. A few simple changes can make a big difference.

Every year, millions of people have their email, bank, or social media accounts broken into. In most cases, it is not because a hacker did something sophisticated. It is because:

• The password was too simple (like "password123" or "sunshine")
• The same password was used on multiple sites
• The password was shared with someone who should not have had it
• The person clicked a fake link and typed their password into a scam site

Once someone has your email password, they can often reset the passwords on your bank, Amazon, and other accounts. It can snowball quickly.

A strong password has three qualities:

1. It is long. Length matters more than complexity. A 16-character password made of random words is harder to crack than an 8-character password full of symbols.

2. It is unique. Every account should have its own password. If one site gets hacked and your password leaks, you do not want that same password unlocking your bank account.

3. It is not guessable. Avoid names, birthdays, addresses, or anything someone who knows you could figure out.

Here is a trick that works well for many people: instead of a single word with numbers tacked on, use a passphrase — a short string of random words.

For example:

• BlueTractor!Lamp47
• SundayMuffin-Cloud-River
• Fence$Notebook2Umbrella

These are long, hard to guess, and much easier to remember than something like X#7kP!2q. Pick four random words that have nothing to do with each other, add a number or symbol somewhere, and you have a strong password.

Using the same password everywhere. This is the most common and most dangerous habit. If one site gets breached, every account with that password is at risk.

Using personal information. Your name, your kids' names, your dog's name, your birthday, your address — hackers try all of these first.

Short passwords. Anything under 12 characters is much easier to crack with modern tools.

Writing passwords on sticky notes near your computer. If someone visits your home or your computer is stolen, those notes are a gift to them.

Sharing passwords over text or email. These can be intercepted or stored in ways you cannot control.

If managing unique passwords for every account sounds overwhelming, a password manager is the answer. It is an app that:

• Stores all your passwords securely in one place
• Generates strong, random passwords for you
• Fills them in automatically when you log in
• Works on your phone, tablet, and computer

You only need to remember one master password — the one that unlocks the password manager itself.

Good options for beginners:

• Bitwarden — Free, easy to use, works on all devices
• 1Password — Very user-friendly, small monthly fee
• Apple Keychain — Built into iPhones and Macs, free and automatic

Many of our clients who were skeptical at first now say a password manager is one of the best tech decisions they ever made.

Even a strong password can be stolen. That is why two-factor authentication (2FA) is so valuable.

With 2FA turned on, logging in requires two things:

1. Your password
2. A code sent to your phone (or generated by an app)

Even if someone steals your password, they cannot get in without also having your phone. Most major services — Gmail, Facebook, your bank — offer this. Turn it on wherever you can.

If you notice strange activity on an account — emails you did not send, purchases you did not make, or a message saying your password was changed — act quickly:

1. Change your password immediately on that account
2. Change it on any other account where you used the same password
3. Check your email account — if that was compromised, reset passwords on everything linked to it
4. Call your bank if any financial accounts may be involved
5. Run a virus scan on your computer

If you are not sure what to do or things feel out of control, call us. We help people sort through exactly these situations all the time.

Setting up a password manager, turning on two-factor authentication, and reviewing your account security is something we do as part of our in-home tech support visits. If you are in Baltimore, Harford, Howard, or Carroll County, we can come to you.

Call (410) 834-0505 or schedule online — we will get your accounts locked down the right way.

My Neighbor Tech provides in-home tech support across Baltimore, Harford, Howard, and Carroll County, Maryland. We specialize in helping seniors, families, and small businesses stay safe online.