Strong Passwords and Two-Factor Authentication Made Simple
Passwords are still the main key to your online life. A few simple habits keep that key safe.
What makes a password strong
- Length: aim for at least 14 characters. Longer is better than complicated.
- Uniqueness: use a different password for every account. If one site is breached, others stay safe.
- Unpredictability: avoid names, birthdays and common words or patterns such as "Password123".
A passphrase made of several unrelated words is easier to remember and strong, for example four or five random words.
Use a password manager
A password manager creates, stores and fills in unique passwords, so you only need to remember one strong master password. Options include those built into major browsers and operating systems, as well as dedicated apps. Choose a reputable one, protect it with a strong master password and keep a secure recovery method.
Turn on two-factor authentication (2FA)
2FA asks for a second proof of identity when you sign in. Even if someone steals your password, they cannot get in without it.
- Best: security keys or passkeys.
- Good: authenticator apps that generate time-based codes.
- Better than nothing: codes sent by text message.
Start with your email, banking, cloud storage and social media accounts, because email can be used to reset other accounts.
Passkeys
Passkeys let you sign in with your device unlock method, such as a fingerprint or PIN, instead of typing a password. They are resistant to phishing and are supported by a growing number of services.
Check for breaches
Services such as Have I Been Pwned let you check whether your email address has appeared in a known data breach. If it has, change the password for that account.
Things to avoid
- Reusing passwords.
- Sharing passwords by email or chat.
- Saving passwords in an unprotected document.
- Entering your password after clicking a link in an unexpected message.
This article is for general information only and is not professional advice. Features, prices and menu names may change between software versions. See our disclaimer.