Password Security: Simple Habits That Protect Accounts

Using one password for many websites is dangerous. If one website suffers a data breach, attackers may try the same email and password on banking, social-media, shopping, and work accounts.

This is called credential stuffing. Even a strong password becomes risky when it is reused across multiple services.

A strong password is long, unique, and difficult to guess. A long passphrase made from unrelated words is often easier to remember and safer than a short password with many symbols.

Avoid names, birthdays, mobile numbers, favourite teams, and predictable patterns such as Password123 or YourName@123.

A password manager can generate and save a different strong password for every account. You only need to remember the password for the manager itself.

Two-factor authentication adds another protection step. Even if someone learns your password, they should not be able to sign in without your authenticator code, security key, or approval.