Strong passwords are long, unique and stored safely. Here is what that means in practice.
Length matters
Longer passwords are harder to guess. A passphrase of several unrelated words is easier to remember than random characters and can be long.
Use a different password for every account
If one site is breached, a reused password exposes your other accounts. Unique passwords limit the damage.
Avoid personal details
Names, birthdays and common words are easy to guess. Avoid them.
Let a tool remember them
A password manager can generate and fill unique passwords so you only memorize one strong master passphrase.
Add a second step
Where available, turn on two-step verification for email, banking and work accounts.
Quick checklist
- Is each password unique?
- Are my email accounts protected by a second step?
- Is my master passphrase long and private?
