Passwords & Securing Your Accounts

Passwords are like keys to your personal home online. You should do everything you can prevent people from gaining access to your password. You can also further secure your accounts by using additional authentication methods.

Passwords

Passwords can be inconvenient, but they’re important if you want to keep your information safe.

Protecting your personal information starts with STOP. THINK. CONNECT.: take security precautions, think about the consequences of your actions online and enjoy the Internet with peace of mind. Here are some simple ways to secure your accounts through better password practices.

  • Make your password a sentence: A strong password is a sentence that is at least 12 characters long. Focus on positive sentences or phrases that you like to think about and are easy to remember (for example, “I love country music.”). On many sites, you can even use spaces!
  • Unique account, unique password: Having separate passwords for every account helps to thwart cybercriminals. At a minimum, separate your work and personal accounts and make sure that your critical accounts have the strongest passwords.
  • Write it down and keep it safe: Everyone can forget a password. Keep a list that’s stored in a safe, secure place away from your computer. You can alternatively use a service like a password manager to keep track of your passwords.

Other Ways to Secure an Account
Typing a username and password into a website isn't the only way to identify yourself on the web services you use.  
  • Get two steps ahead: Turn on two-step authentication – also known as two-step verification or multi-factor authentication – on accounts where available. Two-factor authentication can use anything from a text message to your phone to a token to a biometric like your fingerprint to provide enhanced account security.

Over time, more websites will be adopting multi-factor authentication. In some cases, the services may be available but are not required. 

Many email services offer two-step verification on an opt-in basis. Ask your financial institution, email provider and other online services if they offer multi-factor authentication or additional ways to verify your identity. 


Additional Resources