We’ve never kept as much personal information online as we do today, and most important, sensitive data is secured behind passwords – so having top-notch password security is essential.
If you’re not convinced, just think about the amount of data that someone could reach if they guessed a weak password. Within minutes, they could access your emails, bank accounts, medical records, social media profiles and more.
Don’t panic if you need password help – read our article and be proactive instead. We’ve rounded up seven of the best tips for creating strong, secure passwords, and you can use these for new passwords and to update existing passwords that might be a little too weak.
That’s not the end of our safety advice either. Go here for our verdict on best secure file hosting servicesand look no further if you need advice on differences between consumer and business antivirus software.
Avoid real worlds and personal information
If you want to create strong passwords, avoid numbers and letters that are easy for malicious people to guess.
That means avoiding real words, which can be quickly exposed in dictionary attacks. You should also stop using personal information in your passwords, such as important dates or important names – if you use that type of information, anyone who gets a glimpse of your personal data can guess your passwords. Do not create passwords that follow patterns or rows on the keyboard, because these sequences are easier to guess for brute force and dictionary attacks.
Instead, you should create passwords with randomized strings of letters, numbers and special characters. Use uppercase and lowercase letters, and make passwords as long as possible – because longer passwords are harder for automated systems to hack. Alternatively, you can use phrases to create long passwords (opens in a new tab) which are easy to remember, yet difficult to crack.
You should also strengthen passwords and PINs on devices if you can. Apple and Android devices both have different password complexity options, so you can choose to use stronger codes and login methods instead of just a four-digit PIN – making it harder for anyone to get into your phone, tablet or laptop .
Do not repeat passwords
It’s all too tempting to use a single passphrase for multiple sites—it’s an easy way to remember logins for many different places.
And while we’ve all done it, it’s not necessarily the best way to keep your emails, social media and other accounts secure.
Instead, use separate passwords for each site, app or system you use. Although this may seem difficult to remember, it will make your data far more secure because it can protect other websites even if one of them gets hacked.
Use a password manager
There is one easy way to get around the difficult problem of remembering many different passwords – use a password manager.
A top-notch password manager will store all your passwords in encrypted files, so you can feel confident that your data is protected and you won’t have to go through the headache of trying to remember lots of different phrases.
The best password managers include password generation modules too, so you don’t even have to create passwords yourself – they’ll create ultra-secure phrases for you instead. A top-notch password tool will auto-fill usernames and passwords, some include VPNs, and all offer multi-factor authentication for added security.
If you want guidance on how to find one of these tools, look no further – we’ve got an overview of best password managers.
Don’t trust your browser
Many top browsers offer their own password management modules. In theory, that’s great, since you can store your passwords there instead of relying on yet another tool.
In reality, however, if you want the best password security, you shouldn’t store passwords in your browser.
Hackers can use cookies and malware to steal passwords directly from browsers, and proper password managers usually have better encryption – keeping your data safer. That remains the case if your device is stolen, too, because your passwords aren’t there in your browser for anyone to find.
Don’t write them down
We all have family members who keep passwords on a piece of paper or in a notebook. And if you’re not particularly tech-savvy, it probably seems like a good way to make sure you never forget a password.
That’s certainly true, but it’s also a great way for a criminal to gain access to all of your important accounts—and all they have to do is break into your house, steal your car, or grab your purse.
Never keep your passwords written down. Instead, use a password manager with multi-factor authentication to ensure total protection.
Use stronger authentication methods
In fact, you should use multi-factor authentication (MFA) wherever possible—on your passwords, your password manager, and your devices.
This system – known as MFA or two-factor authentication (2FA) – improves security by adding extra layers of protection to all your logins.
If you use MFA or 2FA, someone can’t access your accounts if they just type in your password. Instead, your password must be accompanied by additional confirmation. Sometimes it’s your fingerprint, on other devices it’s facial recognition, and alternative methods use third-party authentication apps or security codes sent to your phone.
This extra security means that no one can get into your accounts if they only have your password – they’ll need extra information from you too. It’s a fantastic way to make your accounts more secure, and you should always enable it when it’s available.
Do not store them for too long
You may have a robust security regime protected by multi-factor authentication, strong passwords and biometrics, but no security system is completely foolproof.
To add an extra layer of protection to your most valuable data, you should change your passwords every few months.
Because frequent hacks expose username and password data for billions of accounts, it’s quite likely that your passwords will end up on the dark web at some point – but if you regularly change your passwords, the old codes are useless.
We have listed the best password generators.