The whole category in one page.
THE BIGGEST RISK
Password reuse. A breach at any service becomes a breach at yours.
Length matters more than complexity, and uniqueness matters more than both.
THE TOOL THAT MAKES IT POSSIBLE
A password manager. Without one, reuse is inevitable because nobody can remember dozens of unique passwords.
THE SINGLE BEST PROTECTION
Two-factor authentication. It defeats every attack that relies on knowing your password.
Enable it on email first, since email controls password resets for everything else.
THE TRAP THAT LOCKS PEOPLE OUT
Recovery codes stored only on the device generating the codes.
Store them separately. Test whether you could recover an account without your phone.
THE SECOND TRAP
A recovery email address on your own domain. If the domain fails, so does recovery.
ON ACCESS
Individual accounts, never shared logins. The minimum permission that allows the work.
Never give a contractor your own credentials.
THE MOST NEGLECTED ACTION IN ANY BUSINESS
Removing access the day someone leaves.
Keep a list of every system a person is given access to. That list is what you work through.
AUDIT QUARTERLY
You will find accounts for people who left, contractor access from old projects, and applications authorised years ago.
