A strong password is an essential piece of your online security, but it’s tempting to fall into the bad habit of using the same simple login credentials for everything, especially when you have a seemingly infinite list of social media, streaming services, and bank accounts to manage. 

However, if your personal data is compromised, weak passwords can lead to serious consequences. And as we see a record number of data breaches every year, it’s more important than ever to start investing time into creating stronger passwords.

1. Use a minimum of 10 characters

As a general rule of thumb, longer passwords lead to better security. You should strive to create a passphrase, rather than a password. A passphrase is composed of a sentence or a combination of words, making it longer and more complex than the average password. Passphrase creators, however, should steer clear of well-known phrases and adages. 

2. Don’t use real words 

Passwords composed of words that appear in the dictionary are significantly easier to guess than passwords composed of a series of letters and numbers. 

3. Don’t use obvious information

Names, birthdays, phone numbers, and other easily accessible pieces of information should always be avoided when creating a password. 

4. Use different passwords for different websites 

Using a unique password for each account will decrease your vulnerability should one of those accounts become compromised. 

5. Change all of your passwords periodically 

Taking time to update and change your passwords is an important piece of maintaining your security. Passwords don’t need to be overhauled often, but it’s good to try setting a date on your calendar for an annual refresh. 

6. Don’t store your passwords somewhere easily accessible

Your passwords are only as strong as the place that you store them. It’s recommended to avoid storing your passwords on a piece of paper or digital document that others can easily access. There are a number of reputable password storage apps that allow you to store your passwords in a secure spot. 

7. Use 2 Factor Authentication whenever possible

According to Boston University, “2FA is essential to web security because it immediately neutralizes the risks associated with compromised passwords. If a password is hacked, guessed, or even phished, that's no longer enough to give an intruder access: without approval at the second factor, a password alone is useless.”

8. Don’t log into apps or websites while using public wifi 

Someone looking over your shoulder while logging-in isn’t the only danger your passwords face when using public wifi. With the right software, people can see the websites you’ve visited, texts you’ve sent, and your log-in information while you’re connected to public wifi

9. Use a password manager

A password manager is essentially an encrypted digital vault that stores secure password login information. By allowing you to store your passwords in a safe place, the pressure for you to remember dozens of complicated passwords is completely eliminated. Google Password Manager is built into your Google account, making it a popular option for anyone looking to create, safely store, and auto-fill their passwords. 

10. Check your email accounts and phone numbers to see if they’ve been compromised

Just like it’s important to regularly update your passwords, it’s recommended to periodically check if any of your accounts have been compromised. We recommend this website for an easy way to check if your email or phone number has been involved in a data breach.