Most hacked accounts are not broken into by clever hackers. They are opened with passwords that were too simple or reused on many sites. Two habits will protect you from most of these attacks.
What makes a password weak
- Names, birthdays and phone numbers.
- Common choices like 123456, password or your mobile number.
- The same password used for Facebook, email and everything else.
How to make a strong password
Use a passphrase: three or four unrelated words with a number or symbol.
- Weak: rahim1990
- Strong: Tea-Bicycle-River-47
Passphrases are long, which makes them hard to guess, but they are still easy to remember.
Never reuse passwords
If one website is hacked, criminals try the same email and password on Facebook, Gmail and banking apps. Use a different password for every important account.
Use a password manager
A password manager remembers all your passwords for you. You only need to remember one master password. Google Password Manager, Apple Keychain and Bitwarden are good options.
Turn on two-factor authentication (2FA)
2FA adds a second step after your password, usually a code from an app or an SMS. Even if someone steals your password, they cannot log in without the code.
Turn it on for:
- Your email (most important, because it can reset everything else).
- Facebook, WhatsApp and Instagram.
- Banking and mobile financial service apps.
An authenticator app such as Google Authenticator is safer than SMS codes.
Do not forget your router
Change the default admin password of your router and use a strong Wi-Fi password. Our guide on changing your Wi-Fi password explains the steps.