Quick Answer: A strong password is long, unique for every account and hard to guess. Use a passphrase of several random words, store your passwords in a password manager, and turn on two-factor authentication wherever it is offered.
Weak or reused passwords are one of the most common ways accounts get hacked. If one website is breached, criminals often try the same email and password on other sites. A few simple habits can protect you.
What Makes a Password Strong?
- Length: longer passwords are much harder to crack. Aim for at least 12 to 16 characters.
- Uniqueness: never reuse a password across different accounts.
- Unpredictability: avoid names, birthdays, pet names and common words such as password or 123456.
Use a Passphrase
A passphrase is a string of random, unrelated words, such as four or five words you can picture together. It is long, easy to remember and hard for others to guess. Add a number or symbol if a website requires it.
Use a Password Manager
A password manager creates and stores strong, unique passwords for all your accounts. You only need to remember one strong master password. Many browsers and phones include a built-in option.
Turn On Two-Factor Authentication
Two-factor authentication (2FA) asks for a second step, such as a code from an app, when you log in. Even if someone steals your password, they usually cannot get in without that second step. Turn it on first for email, banking and social media.
Watch Out for Phishing
Be careful with messages asking you to log in through a link. Go directly to the official website or app instead, and never share codes sent to you.
Change Passwords After a Breach
If a service you use reports a data breach, change that password immediately, and change it anywhere else you used it.
Conclusion
Long, unique passwords, a password manager and two-factor authentication together give you strong protection with very little daily effort.