Password Do’s and Don’ts

Keeping up with a million different passwords is annoying, but it’s critical for guarding against cyberthreats. Here are three things you should start doing today when it comes to your account logins.

By Rebecca L. Bennett

Keeping up with a million different passwords can feel inconvenient and even downright annoying, but proper password security practices are critical for guarding against cyberthreats, and there are tools available to help make keeping track of passwords easier.

Here are three things you need to start doing today when it comes to your account logins:

1. Use strong passwords.

Over the years, the specifics of password security advice have evolved with technology, but two things have remained true: A strong password is long — the longer, the better — and it’s difficult to guess because it doesn’t contain any personal information, such as birthdates or the names of loved ones or pets.

According to CISA.gov, random strings of letters, numbers and special characters or passphrases both provide strong protection.

2. Use a unique password for every account.

You should use a unique password for every online account. By doing this, you ensure that even if a hacker cracked one of your passwords, they couldn’t use it to access all of your other accounts.

3. Use a password manager or passkeys.

If you’re finding it difficult to keep track of so many long and unique passwords, try using a password manager to store all your login credentials in one place. That way, you only have to remember one difficult password — the one that unlocks your password manager! Just be sure to consult a trustworthy source, such as Consumer Reports, to find a reputable password manager.

You can also enable passkeys on your devices for certain logins so you only have to remember a PIN number or use facial recognition.

These password do’s and don’ts can help you protect your online accounts — and your personal data and finances — from cybersecurity threats.

Personal Finance