Why Password Safety Matters
Your email, bank account, and social media accounts are protected by passwords. If a hacker gains access to your email, they can often reset the passwords for all your other accounts. A strong, unique password for each account is your first line of defense.
- Email accounts: Access to your email lets hackers reset passwords for everything else
- Banking and financial accounts: Direct access to your money
- Social media: Can be used to scam your friends and family
- Shopping accounts (Amazon, etc.): Stored credit card information
What Makes a Strong Password
A strong password is long, random, and unique to each account.
- At least 12 characters long (longer is better)
- A mix of uppercase and lowercase letters, numbers, and symbols
- Not based on personal information (birthdays, names, addresses)
- Different for every account — never reuse passwords
- Not a common word or phrase
Tip: A passphrase — a string of 4–5 random words — is both strong and easy to remember. For example: 'purple-lamp-river-cloud-seven' is much stronger than 'Password123'.
Using a Password Manager
A password manager is a secure app that stores all your passwords in one place, protected by a single master password. You only need to remember one password, and the manager fills in the rest automatically. Popular options include Bitwarden (free), 1Password, and LastPass. Most work on computers, phones, and tablets.
Tip: Bitwarden is free, open-source, and highly rated by security experts. It's a great starting point for anyone new to password managers.
Two-Factor Authentication (2FA)
Two-factor authentication adds a second layer of security to your accounts. Even if someone gets your password, they can't log in without also having access to your phone or email. Enable 2FA on your most important accounts — especially email and banking.
- Enable 2FA on your email account
- Enable 2FA on your bank and financial accounts
- Enable 2FA on social media accounts
- Use an authenticator app (like Google Authenticator) rather than SMS when possible
- Store backup codes in a safe place
Common Password Mistakes to Avoid
Avoid these common mistakes that make your accounts vulnerable:
- Using the same password for multiple accounts
- Using simple passwords like 'password', '123456', or your birthday
- Writing passwords on sticky notes near your computer
- Sharing passwords with others (even family members)
- Never changing passwords after a data breach
- Using security questions with answers that are easy to guess or find on social media