Safe Passwords and Account Protection

Passwords are the keys to your life

Email and banking accounts deserve the strongest protection, because they can be used to reset everything else.

Practical rules

• Use a different password for every important account.
• Longer is stronger. A passphrase of several random words beats a short, complex string.
• Use a password manager. It remembers unique passwords so you do not have to.
• Turn on two-factor authentication. Prefer an authenticator app over text messages.
• Review sessions. Remove devices you do not recognise.

Scenario

A data breach exposes a password you used in several places. Because you reused it, several accounts are at risk at once. If each account had a unique passphrase, the breach would affect only one.

Recovering from a breach

Change the exposed password, change it anywhere it was reused, and turn on two-factor authentication. Check for unexpected recovery email or phone changes.

Why codes matter

A one-time code is often the last barrier. Never share one, even with someone who claims to be from support.