Basic Rules for Managing Passwords (2 minute read)

You’ve heard it a million times, ”Make sure your passwords are long, strong, and unique.”  You know in your heart of hearts if you've implemented good password practices.  If your passwords are too short or you are reusing. Change them immediately and follow best practices.

Ideally, you have already implemented better account security such as a passkey or security key. Even so, we are not quite yet a passwordless internet experience. Therefore, you will still often need to create passwords for new accounts and manage the ones you have already created. 

Manage to strength

What exactly is a strong and unique password? The unique part is easy. Each account that requires a password, has a password that is not used on any other account /full stop. Strong passwords are at least 10 characters with numbers, symbols, and upper and lower case letters. 

Use a browser based  Password Manager freely available in Chrome, Edge, Safari  or Firefox.  These password managers will auto-create strong passwords and auto-fill your passwords, while keeping them stored on encrypted servers, safe from hacks. 

If for some odd reason you 100% wish to remain in the 20th Century and go old school and create your own passwords, here's some advice to follow:

• Don’t reuse passwords: Just don't. 
• Avoid words and character combinations that can be associated with you. Avoid words, numbers, or phrases - such as your street name, your kid’s name, your birthday, and anything else that can be found out about you publicly like from details in your social media accounts. 
• Longer is better: At least 10  characters is the recommended length.  A passphrase ( a series of words) is fine. Use a mix of uppercase and lowercase letters, a number, and a symbol (most sites require this)
• Create fewer passwords: You’ve seen it across the web. The offer to login with your Google, Microsoft, or Apple account. If you have strengthened that account, like using a passkey, than go right ahead and login with that account. This will bring strong protections with you and reduce the number of passwords you need to create.

Maybe you don’t need a password at all: Many online services, like retailers, allow you to make a purchase as a guest. If you only are going to use the site once or infrequently, then take advantage of the guest process. If you use an online payment system like PayPal you don’t even have to give any kind of payment information. That’s one less password to create and immediately forget.

Learn More:  Google’s Help Center article on Password Management.