Passwords

📄 What is it?

A strong password is one that’s hard for someone else to guess — even if they know things about you.

It’s longer, more unique, and not based on names, birthdays, or simple words.

The best passwords often look strange, or are made of several unrelated words.

🛡️ Why it matters

Weak passwords are easy to crack. If someone can guess your password or it’s leaked in a data breach, they could get into your email, bank, or social media accounts.

🧠 Common real-world examples

• You use your pet’s name and birth year — someone close to you might guess it
• You reuse the same password across websites — if one gets hacked, they all do
• You pick something simple to remember — but so do millions of others
• Once someone has access to your email, they can reset other accounts too.

🔐 Tips for strong passwords

A strong password doesn’t have to be hard to remember! A password like “Yellowcandle-Horse-Bus1?” is better than “Summer2023!”

• Choose a password longer than 12 characters if you can
• Don’t use names, birthdays, or anything someone could guess
• Avoid common passwords like 123456, qwerty, or password1
• Use a password manager to help create and store your logins
• Never reuse passwords for important accounts like email or banking

Click here to head back to the top of our learn page.

📄 What is it?

Reusing the same password across multiple websites might feel convenient, but it’s one of the easiest ways to get hacked.

If one website is breached and your password is exposed, attackers often try it on other sites to see what else they can access.

🔓 Why it matters

Many attacks today don’t come from guessing your password, they come from using already leaked ones.

This is called a credential stuffing attack and it works when people use the same password everywhere.

Once someone has access to your email, they can take control of your other accounts, often without you noticing.

⚠️ Real-world example

1. A shopping website gets hacked. Your password from there also works for your email.
2. Using your email account, someone resets your Amazon password.
3. You don’t notice for weeks until an unexpected payment alerts you.

✅ What to do instead

• Use a different password for every important account
• Prioritise your email, banking, and social media first
• Use a password manager to keep track so you don’t have to (see our suggestions above)
• If you're not ready for a manager, use your browser’s built-in password saving

Click here to head back to the top of our learn page.

On it's way! (sorry)