🔒

Section 8: Digital and Online Safety

Password Security

Creating and managing strong passwords

Why strong passwords matter

Weak passwords let hackers access your accounts. Strong passwords protect you.

What makes a strong password:

✅ At least 12 characters
✅ Mix of letters, numbers, symbols
✅ Not common words
✅ Different for each account

Bad passwords to avoid:

❌ 123456
❌ password
❌ Your name/birthday
❌ phone number

Tips:

Use password manager
Enable two-factor authentication
Change passwords regularly
Never share passwords

Overview

Passwords are your first line of defense. Strong, unique passwords for each account prevent most attacks.

Password Best Practices

Length:

Minimum 12 characters
16+ characters for important accounts
Longer is better

Complexity:

Uppercase and lowercase letters
Numbers (0-9)
Symbols (!@#$%^&*)
No dictionary words

Uniqueness:

Different password for each account
If one is compromised, others stay safe
Use password manager to remember

Password Managers

Benefits:

Generate strong passwords
Store securely
Auto-fill on websites
Only remember one master password

Two-Factor Authentication (2FA)

Adds extra security layer
Requires password + code
Code from phone app or SMS
Enable on all important accounts

Common Password Mistakes

Mistake	Better Approach
Same password everywhere	Unique password per account
Simple passwords	12+ characters, mixed
Writing passwords down	Use password manager
Never changing passwords	Change every 3-6 months

If Password Compromised

Change password immediately
Check account activity
Enable 2FA if not already
Change same password on other sites

Important Resources

Have I Been Pwned: haveibeenpwned.com
Password strength checker: passwordmonster.com

Frequently Asked Questions

How often should I change passwords?

Every 3-6 months for important accounts. Immediately if you suspect compromise.

Are password managers safe?

Yes, reputable password managers use strong encryption. Much safer than reusing passwords or writing them down.

Is SMS 2FA good enough?

SMS 2FA is better than nothing, but app-based (Google Authenticator, Authy) is more secure.

What if I forget my password manager master password?

Most managers can't recover it. Write it down and store securely, or use manager with recovery options.

Last updated: March 2026

Disclaimer: This guide provides general information only. Always verify with official sources for the most current information.