What you can do

Create a strong password in 5 steps

Identity theft. Financial loss. Hours wasted. Massive stress and headaches. Data breaches and other cyber threats, like hackers, can come with enormous consequences. Since anyone using the internet is a potential target, let’s dig into some proven password strategies.

1. Create strong and unique passwords – everywhere

A good password is the one you use on only one account. Many people think simple variations on a password (adding ! or changing a number) keep things secure enough. But a good guess or software that can test iterations quickly is all a hacker needs to bypass the 123 you added at the end of your often-used password.

DId you know: 

A one-word password can be found by rapid-fire guessing hacking software within one second.

It’s also essential to use a strong and unique password for all accounts, not just those that are “high risk,” like bank or medical accounts. Because of the range of accounts and the sheer amount of basic information in them, you should consider a throwaway account a potential gold mine for a hacker.

What makes a strong and unique password? Something that is:

  • Easy to remember but hard to steal — think uniquely memorable to you
  • Made of two or more random words with a number or special character like Canary53Hopscotch or Mosaic!?Pyramid.
  • 12 or more characters in length.
  • Not obvious — don’t use birthdays, home addresses, names of people, places, or sports teams and please don’t use the word “password” or the string of numbers 123 in any password, ever.

2. Use a password manager to help

Creating a unique and strong password for every single account you use sounds great in theory, but remembering them all might feel impossible.

Thank goodness for password managers, which help you securely create and store passwords that are random strings of letters, numbers, and characters.

There are many reputable password managers. like 1Password, Dashlane, and LastPass. Some are super simple if that meets your needs and comfort level, and others allow for sharing so you can store joint account passwords, a child’s passwords, or an elderly parent or family member’s passwords.

What’s more, many of these tools also let you enter other details about online accounts and save non-digital information, such as photos of passports and PDFs of important documents.

3. Keep passwords — and more — to yourself

Never share your username, password, or security questions. Scams masquerading as social media memes encourage sharing your first car, favorite subject in school, or childhood pet. These are the very answers to security questions that can bring a hacker closer to your accounts.

Relating to #2, by using a password manager, you avoid sharing that information via, say, a text to your spouse or over email.

4. Stay vigilant for forgotten password attempts

With a password manager, you know you’ll never forget your password. So why did you just get an email saying someone tried the “Forgot My Password” feature?

It could mean someone has your username and is attempting to hack into your account but doesn’t yet have your password (phew!). For many accounts, you can set alerts to notify you if someone tries that feature.

5. Turn on biometrics and multi-factor authentication.

Requiring verification when you log in adds an extra layer of protection. Multi-factor authentication (MFA) is often a one-time password or code sent via SMS or email.

It may take a few clicks more to get logged in, but the extra time is nothing compared to the hassle of being hacked. Opt for MFA whenever it’s available.

Like these tips and looking for more? Download our comprehensive guide to cybersecurity.

Related articles