THE SHORT VERSION
Use passwords of at least 16 characters, a different one for every account, and let a password manager remember them. Add multi-factor sign-in to email, social media and money accounts.
A familiar situation
Imagine you use the same password for email, shopping and banking because it’s easy to remember. If one of those sites is breached, that one password could open the others.
1. Make them long
CISA recommends at least 16 characters. A passphrase of four to seven unrelated words works, or a random mix of letters, numbers and symbols.
2. Use a different one everywhere
A unique password for each account means one breach doesn’t expose the rest. Start with the accounts that matter most: email, banking and health.
3. Let a password manager remember
A password manager stores your passwords, can create strong ones, fills them in, and flags weak or reused ones. You only need to remember one strong passphrase for the manager itself. Then turn on multi-factor sign-in where you can.
One thing to try today
Pick one important account today and change its password to a long passphrase saved in a password manager. One account is a good start.
Read more from trusted sources
General educational guidance. If you believe someone has stolen your information or money, use the official recovery guidance at IdentityTheft.gov or ReportFraud.ftc.gov.
Pass a useful tip along.
Share the guide or copy its short takeaway for your own post.