How to Create a Strong Password and Protect Your Online Accounts

Passwords are one of the first lines of defense between your personal information and cybercriminals. From email and banking accounts to social media and online shopping, strong passwords can help protect your identity, finances, and private information.

Unfortunately, many people still use passwords that are easy to guess or reuse the same password across multiple accounts. That can make it much easier for a hacker to gain access.

Here are some simple ways to create stronger passwords and better protect your online accounts.

Make Your Password Longer

When it comes to passwords, length matters.

Instead of using a short password with a few numbers or symbols, consider creating a longer password or passphrase. A passphrase combines several words into something that is easier for you to remember but much harder for someone else to guess.

For example, rather than using something predictable like:

Truck123!

you could create something longer and more unique, such as:

CoffeeLakeFriday27!

The key is to avoid using examples you find online and create something that is personal enough for you to remember but difficult for someone else to predict.

Avoid Personal Information

Your password should not contain information that someone could easily discover about you.

• Your name
• Your birthday
• Your children’s names
• Your pet’s name
• Your address
• Your favorite sports team
• Your phone number

Much of this information may already be available through social media or public records.

Use a Different Password for Every Account

One of the biggest password mistakes is using the same password everywhere.

If a cybercriminal obtains the password for one account, they may try using it on your email, bank account, social media, and other websites.

Using a unique password for every important account helps limit the damage if one password is ever compromised.

Consider Using a Password Manager

Remembering dozens of unique passwords can be difficult. A password manager can securely store your passwords so you do not have to memorize every one.

Many password managers can also generate long, random passwords for you.

Instead of remembering every password, you only need to remember the strong master password that protects your password manager.

Turn On Multi-Factor Authentication

Even the strongest password can potentially be compromised.

Multi-factor authentication, sometimes called MFA or two-factor authentication, adds another layer of protection.

After entering your password, you may be asked to verify your identity with another method, such as:

• An authentication app
• A security key
• A fingerprint or facial scan
• A verification code

Whenever multi-factor authentication is available, consider turning it on, especially for email, banking, social media, and other important accounts.

Never Share Your Password

Legitimate companies generally will not ask you to send your password through email, text message, or social media.

If someone contacts you asking for your password or login information, treat it as a warning sign.

You should also be cautious about links in unexpected emails or text messages. Cybercriminals frequently create fake login pages designed to steal usernames and passwords.

When in doubt, go directly to the company’s official website or contact the company using a phone number you already know.

Change Passwords That May Have Been Compromised

If you receive notice that a company you use has experienced a data breach, take it seriously.

Change the password associated with that account and make sure you are not using the same password anywhere else.

You should also change a password immediately if you notice unusual account activity or believe someone else may have gained access.

A Few Extra Minutes Can Make a Big Difference

Creating strong passwords does not have to be complicated.

Long, unique passwords, a password manager, and multi-factor authentication can significantly improve the security of your online accounts.

Cybersecurity starts with small habits. Taking a few extra minutes to strengthen your passwords today can help protect your personal information and your business in the future.

Is Your Business Prepared for a Cyber Incident?

Strong passwords and good cybersecurity practices can help reduce your risk, but no business is completely immune from a cyberattack, data breach, ransomware incident, or other digital threat.

Cyber insurance may help provide protection for certain costs associated with a covered cyber incident, which can include expenses related to data recovery, customer notification, legal assistance, business interruption, and other response efforts depending on the policy and coverage selected.

If you own or operate a business, ask your insurance agent about cyber insurance. Your agent can help you review your current coverage, identify potential gaps, and discuss whether cyber insurance makes sense for your business.

Taking steps to prevent a cyber incident is important. Having a plan for what happens if one occurs can be just as important.

Coverage varies by insurance carrier and policy. Contact your insurance agent to discuss available coverage, exclusions, limits, and eligibility.