Remembering passwords becomes difficult when you use email, social media, shopping sites and business tools.
The solution is to create unique passwords and use a secure way to manage them. You should also prepare for situations where you lose a device or need to recover an account.
Affiliate disclosure: Some links in this article may be affiliate links. CoreBridge Solutions LLC may earn a commission from qualifying purchases at no additional cost to you.
What Makes a Password Strong?
A useful password is long, difficult to predict and unique to the account.
Avoid names, birthdays, business names and predictable variations of old passwords. Adding a number to a familiar word does not necessarily make it difficult to guess.
Use Generated Passwords Where Possible
A password manager can generate a long, random password for each account and store it for you.
Let the manager generate the password rather than trying to invent a memorable pattern. Follow the website’s requirements, but avoid shortening passwords unnecessarily.
Choose a Strong Master Passphrase
If your password manager uses a master password, make it unique and memorable.
One approach is a long passphrase made from randomly selected, unrelated words. Avoid famous quotations, song lyrics and sentences someone could associate with you.
Do not reuse this passphrase for another account.
Stop Reusing Passwords
Different accounts need different passwords.
If a reused password appears in a breach, changing it on only one website leaves your other accounts exposed. Replace it everywhere you used it, beginning with email and other important accounts.
Compare Password Managers Carefully
Look beyond the advertised monthly price. Consider:
- Compatibility with your devices and browsers.
- Multifactor authentication options.
- Account recovery procedures.
- Secure sharing features, if needed.
- Export options and renewal pricing.
- The provider’s security documentation and independent assessments.
A free plan may be enough for some people. Paid features are useful only when they meet your needs.
Explore a password manager:
Compare Plans and Features
Add Multifactor Authentication
A strong password should be supported by another sign-in factor where available.
Passkeys and security keys can provide protection against phishing. An authenticator app is another option on many services.
Keep recovery codes in a secure location separate from the device you normally use to sign in.
Use Passkeys Where Available
Some services let you sign in with a passkey instead of a password.
Before enabling one, understand how it is stored, whether it synchronizes between devices and how you would recover access if you lost your device.
Keep your device and the account used for synchronization well protected.
Change Passwords When There Is a Reason
Change a password if it was exposed, reused on a breached service, shared with someone who should no longer have access, or entered into a suspicious website.
You should also investigate unfamiliar sign-ins and review your recovery information. Changing a password alone may not end every active session.
Build a Simple Account Routine
Begin with your primary email account. Give it a unique password, enable multifactor authentication and check its recovery details.
Then secure your other accounts in order of importance. A gradual approach is easier to maintain than trying to fix everything at once.
