Use strong passwords to protect your accounts

---

A strong password follows ALL THREE of these tips.

1. Make them long

At least 16 characters—longer is stronger! 

2. Make them random

Two ways to do this are:

Use a random string of mixed-case letters, numbers and symbols. For example:

• cXmnZK65rf*&DaaD
• Yuc8$RikA34%ZoPPao98t

Create a memorable phrase of 5 – 7 unrelated words. This is called a “passphrase.” To make it even better, get creative with spelling and/or add a number or symbol. For example:

• Strong: HorsePurpleHatRunBaconShoes
• Stronger: HorsPerpleHatRunBayconShoos
• Strongest: HorsPerpleHat#1RunBayconShoos

3. Make them unique 

Use a different strong password for each account.

For example:

• Bank: k8dfh8c@Pfv0gB2
• Email account: LmvF%swVR56s2mW
• Social media account: e246gs%mFs#3tv6

Remembering long, random and unique passwords for every account is not possible. Rather than write them down, use a password manager, an easy-to-use program that stores all your passwords. Password managers tell us when we have weak or re-used passwords and many of them can offer to generate strong passwords for us. They can also automatically fill logins into sites and apps as we move from one to another.

We only need to remember one strong password—the one for the password manager itself. (Tip: Create a memorable long “passphrase” as described above.)

There are many password managers to choose from. Some are free, like the built-in password managers in your web browser, and some cost money. Search a trusted source for “password managers” like the Consumer Reports, which offers a selection of highly rated password managers. Read reviews to compare options and find a reputable program for you.

When we use a password manager, we are much more likely to use a unique, strong password on every site. And that makes it much harder for someone to steal our valuable information!

 Phishing occurs when criminals try to get us to open harmful links, emails or attachments that could request our personal information or infect our devices. Phishing messages or “bait” usually come in the form of an email, text, direct message on social media or phone call. These messages are often designed to look like they come from a trusted person or organization, to get us to respond. 

The good news is we can avoid the phish hook and keep our accounts secure with these tips! 

1. Recognize

Look for these common signs:

• Urgent or emotionally appealing language, especially messages that claim dire consequences for not responding immediately
• Requests to send personal and financial information
• Untrusted shortened URLs
• Incorrect email addresses or links, like amazan.com

A common sign used to be poor grammar or misspellings although in the era of artificial intelligence (AI) some emails will now have perfect grammar and spellings, so look out for the other signs.

2. Resist

If you suspect phishing, resist the temptation to click on links or attachments that seem too good to be true and may be trying to access your personal information. Instead, report the phish to protect yourself and others. Typically, you’ll find options to report near the person’s email address or username. You can also report via the “report spam” button in the toolbar or settings.

3. Delete

Delete the message. Don’t reply or click on any attachment or link, including any “unsubscribe” link. Just delete.