1. Length beats complexity
Adding one character is worth more than swapping in a few symbols. A 16-character passphrase of random words is far stronger — and easier to remember — than an 8-character string stuffed with !@#$. Prefer long passphrases; let a password manager generate them for you.
2. Never reuse passwords
If one website is breached, attackers immediately try the same email-and-password pair on your other accounts — a technique called credential stuffing. Every important account deserves a unique password. If you reuse passwords, a single leak can cascade into many compromised accounts.
3. Use a password manager
A password manager generates, stores, and auto-fills unique strong passwords for every site, so you only need to remember one master passphrase. Built-in managers in your browser or phone are a fine start; dedicated managers add cross-device sync and secure sharing.
4. Turn on two-factor authentication (2FA)
2FA adds a second proof of identity — a code from an app, a security key, or a one-time code — so that even a stolen password is not enough to log in. Prefer authenticator apps or hardware keys over SMS, and enable 2FA on email, banking, and social accounts first.
5. Understand breach checkers
Services such as Have I Been Pwned let you check whether your email or password has appeared in a publicly known data breach. They work by comparing a hash of your input against a database of breached credentials — your input is not sent in plaintext, and no real breach data is bundled into this site. Use them to find out which of your passwords you should change right away.
6. Recognize phishing
Most account takeovers don't come from cracking — they come from people being tricked into typing their password into a fake site. Check the address bar carefully, be suspicious of urgent or alarming messages, and never enter a password after clicking a link in an unexpected email or text. When in doubt, navigate to the site yourself.
Security advice on this page is general educational information and is not tailored to your specific situation.