Passwords & Privacy

Why Password Security Matters

Weak or reused passwords are the number one cause of account breaches. Attackers use automated tools to try millions of common passwords per second. A strong password policy is your first and most important line of defense.

What Makes a Strong Password?

• Length — At least 12 characters. Longer is always better.
• Complexity — Mix of uppercase, lowercase, numbers, and symbols.
• Unpredictability — Avoid dictionary words, names, and dates.
• Uniqueness — Never reuse the same password across multiple sites.

correct-horse-battery-staple is stronger than P@ssw0rd — length beats complexity.

Password Managers

A password manager generates and stores unique, complex passwords for every account. You only need to remember one master password. Popular options: Bitwarden (free, open-source), 1Password, Dashlane.

Two-Factor Authentication (2FA)

2FA adds a second layer of verification beyond just a password. Even if an attacker steals your password, they can't log in without the second factor.

• SMS codes — A code sent to your phone. Better than nothing, but vulnerable to SIM swapping.
• Authenticator Apps — Apps like Google Authenticator or Authy generate time-based codes. Much more secure than SMS.
• Hardware Keys — Physical devices like YubiKey. Most secure option.

Digital Privacy Basics

• Use HTTPS — Always ensure the sites you visit use encrypted connections.
• VPN — Encrypt your internet traffic, especially on public Wi-Fi. See VPN & Firewall.
• Browser Privacy — Use privacy-focused browsers (Firefox, Brave) and block trackers.
• Review App Permissions — Don't grant apps more access than they need.
• Regular Software Updates — Patch known security vulnerabilities promptly.

What's Next?

Discover how your credentials are secured using hashing in Cryptography & Encryption, learn about device-level threats in Viruses & Malware, or protect your connection with a VPN & Firewall.