Why passwords matter
Your password is often the only thing standing between a stranger and your email, bank, or photos. Weak or reused passwords are one of the easiest ways for criminals to break in — and one of the easiest things you can fix.
The problem with reusing passwords
If you use the same password on multiple sites, one data breach can expose all of those accounts at once. Criminals take stolen passwords from one breach and try them on other popular sites — a technique called "credential stuffing."
How to build a strong password
- Make it long — length matters more than complexity. Aim for 12+ characters
- Try a passphrase of 4 random, unrelated words (e.g., correct-horse-battery-staple) — easy to remember, hard to guess
- Use a different password for every important account, especially email and banking
- Avoid personal details like birthdays, pet names, or addresses
Password managers
A password manager is an app that creates and remembers strong, unique passwords for every site, so you only need to remember one master password. This makes it realistic to have a different strong password everywhere, without writing them all down.
Two-factor authentication (2FA)
2FA adds a second step to logging in — usually a code sent to your phone or an app — in addition to your password. Even if a criminal steals your password, they still can't get in without that second code. Turn it on for email, banking, and any account that offers it; it's one of the single most effective things you can do to protect an account.
✅ Quick tips
- Use a long, unique password for every important account
- Consider a password manager to keep track of them
- Turn on two-factor authentication wherever it's offered
- Never share your password or 2FA code with anyone who contacts you unexpectedly