1.Ensure Your Passwords are ACTUALLY Strong

A strong password should be: 

• At least 12 characters (ideally more)
• Random, with a mix of upper and lowercase letters, numbers, and symbols. Avoid dictionary words and personal details. 
• Difficult to guess. Experts say that password length is the most crucial factor. 

2. Use a Password Manager

Managing dozens (or even hundreds) of unique passwords can be overwhelming. A password manager simplifies this by securely creating and storing strong passwords in an encrypted database, accessible across your devices. 

Bonus: Password managers protect against phishing by only entering credentials on verified domains, adding an extra layer of security.

3. Never Reuse Passwords

Reusing passwords across sites is risky. A breach on one platform can ultimately compromise your accounts on others. A good password manager will identify reused passwords and suggest unique replacements.

4. Avoid Password Hints

Password hints often contain easily guessable information, defeating the purpose of having a secure password. Instead, rely on your password manager to store and retrieve your passwords.

Best Hint: “Check your password manager.”

5. Change Default Passwords 

Default passwords on devices like routers, security cameras, or smart home gadgets are prime targets for attackers. Always replace default credentials with strong, unique ones.

6. Enable Multi-Factor Authentication

Even the strongest passwords can be compromised. MFA adds an extra layer of protection, ensuring that no one can access your accounts without providing a second form of verification, such as an authenticator app.

Recommendation: Prioritize MFA for high-value accounts like email, banking, and financial services.

7. Only Change Passwords When Necessary

Regularly changing passwords isn't necessary unless there's a specific reason, such as a suspected breach or a weak password. Constant password changes can lead to weaker, easily guessable passwords. Stick to strong, unique passwords and update them only when required.

Pro Tip: If forced to change a password, let your password manager generate the longest, strongest one possible.

Original Source: ZDNET