FixableProtecting your accounts
Weak & reused passwords
One password, used everywhere - the attacker’s master key.
Understand it
Reuse a password and a single breached website hands over all your accounts. Short or predictable passwords fall to automated guessing in seconds.
How to spot it
If you can recall all your passwords, there are too few of them and they are too alike.
Close the gap
- Use a password manager, and give every account a different, long password.
- For the few you must remember, use a passphrase of several unrelated words.
- Turn on two-step sign-in for email, banking and anything that matters.
- Try the strength checker and breach check in the Toolkit.
What to do about it
This is part of your plan - Set up a password manager. Work through it there and you’ll close this off along with everything else it covers.