Getting this right.
WHAT MAKES A PASSWORD STRONG
Length, more than complexity.
A long passphrase beats a short complicated string.
WHAT MAKES IT WEAK
Reuse across accounts
Anything guessable: your business name, a year, a common word
Short length
THE REUSE PROBLEM
The largest risk.
A password stolen from a breached service elsewhere is tried against your accounts automatically.
WHAT TO USE
A password manager, generating a unique password for every account.
WHY A MANAGER
You cannot remember dozens of unique passwords. Nobody can.
Without one, people reuse.
WHAT TO PROTECT MOST
Your hosting account Your domain registrar Your site administrator account Your email
THAT SECOND ONE
Frequently overlooked and the most damaging to lose.
WHAT NOT TO DO
Store passwords in a browser on a shared computer Send passwords by message Use the same password for admin and email
WHAT TO DO NOW
Change any password you have reused.
