Why Passwords Matter So Much
Your password is the lock on the door to your account. If someone gets your password, they can read your email, access your bank, or impersonate you online. Hackers do not usually guess passwords one at a time — they use automated tools that try millions of combinations per second, or they buy lists of leaked passwords from data breaches. A strong, unique password is your best defense.
What Makes a Password Strong
A strong password has three qualities:
- Long — at least 12 characters, ideally 16 or more
- Random — not a word, name, or phrase that someone who knows you could guess
- Unique — not used on any other website or account
Tip: A passphrase — four or five random words strung together, like "purple-lamp-river-cloud" — is both strong and easier to remember than a string of random characters.
Never Reuse Passwords
Using the same password on multiple sites is one of the most dangerous habits in online security. When one website gets hacked and passwords are leaked, criminals immediately try those same passwords on email, banking, and shopping sites. This is called "credential stuffing," and it works because so many people reuse passwords. Each account should have its own unique password.
Use a Password Manager
A password manager is an app that remembers all your passwords for you. You only need to remember one master password — the password manager handles the rest. It can also generate strong, random passwords automatically so you never have to think one up yourself.
- Bitwarden — free, works on Windows, Mac, iPhone, and Android
- Apple Keychain — built into iPhones, iPads, and Macs, completely free
- Google Password Manager — built into Chrome and Android devices
- 1Password — paid option with extra features for families
Tip: If you use an iPhone or a Mac, Apple Keychain is already built in and ready to use. When you create a new account on a website, it will offer to generate and save a strong password for you automatically.
Turn On Two-Factor Authentication
Two-factor authentication (also called 2FA or two-step verification) adds a second layer of protection to your account. Even if someone gets your password, they cannot log in without also having access to your phone. When you log in, the site sends a short code to your phone by text message or an app, and you enter that code to complete the login.
- Turn on 2FA for your email account first — it is the most important one
- Also enable it for your bank, Amazon, Facebook, and any account with payment information
- Most sites have a "Security" or "Account" settings page where you can find this option
Watch Out for Phishing
Phishing is when a scammer sends you an email or text that looks like it is from a real company — your bank, Amazon, or Microsoft — and asks you to click a link and enter your password. The link goes to a fake website designed to steal your login.
- Never click a link in an email asking you to log in — go directly to the website instead
- Check the sender's email address carefully — scammers use addresses like "amazon-support@gmail.com"
- Legitimate companies will never ask for your password by email or phone
Tip: If you receive an email that seems urgent — "Your account will be closed!" or "Suspicious activity detected!" — do not click anything. Open a new browser tab and go directly to the company's website to check your account.
What to Do If Your Password Is Compromised
If you think an account has been hacked, or if you receive a notice that your information was part of a data breach:
- 1Change the password on the affected account immediately
- 2Change the password on any other account where you used the same password
- 3Turn on two-factor authentication if you have not already
- 4Check your email account for any forwarding rules or filters you did not set up
- 5If financial information was involved, contact your bank
Need Help Getting Set Up?
Setting up a password manager or enabling two-factor authentication can feel overwhelming if you have never done it before. My Neighbor Tech can walk you through the process in person, at your home, at a pace that is comfortable for you. We serve families and seniors across Baltimore, Howard, Harford, and Carroll Counties.