Start with email
Your email account can often reset passwords for other services. Give it a strong password that you do not use anywhere else.
A practical approach
- Use a password manager to create and store unique passwords.
- If you need a memorable password, combine three random words.
- Do not base passwords on names, birthdays, teams or information visible online.
- Never share a password by email, text or telephone.
If a password is exposed
Change it immediately using the genuine app or website. Change it on every other account where you reused it. Check the account’s recent activity and sign out unfamiliar devices.
Add another layer
Turn on an extra sign-in check for email, banking, social media and other important accounts.