Tips: Password Security

Strong authentication practices protect your online and mobile accounts against compromise:

Password Security¶

• Use unique passwords for each website, reputable password vaults with strong encryption make it easier to manage multiple sets of credentials.
• Don’t share passwords with anyone.
• Change your passwords periodically.
• Don't use obvious or well-known information for your passwords (birthdates, anniversaries, etc.)
• Longer is stronger. Establish “pass phrases” instead of traditional “passwords”; multiple words combined can create an easy to remember, more secure password (examples below).
• Use out of band multi-factor authentication to further protect logins for high risk services such as online banking and email. Consider using a soft or hard token authenticator instead of text messages for the second factor.
• Avoid logging in to websites from links sent in email. Leverage search engines to locate the legitimate website instead.

Password Tips¶

• Use at least ten characters (12 or more is better!)
• Create passwords that are easy to remember, but hard to guess.
  • Phrases are great: SunsetsarethebestonJanuary1st!
  • Create a password from the first letter of each word in a memorable sentence.

Tools¶

• Check the security of your password at https://www.security.org/how-s...
• Check to see if your password or email account has been included in a breach
  • https://haveibeenpwned.com/passwords
  • https://haveibeenpwned.com/