Password Security

How to create, store, and protect passwords and passkeys without making security miserable.

Use unique passwords

Password reuse is dangerous because one breached site can unlock many accounts. A password manager makes unique passwords realistic and reduces the need to remember them.

Length beats cleverness

Long random passwords are stronger than short complex ones. For passwords you must remember, use a long passphrase with unrelated words.

Turn on MFA

Multi-factor authentication blocks many stolen-password attacks. Authenticator apps and security keys are stronger than SMS, though any MFA is usually better than none.

Passkeys are coming

Passkeys replace passwords with cryptographic login tied to your device or password manager. They are phishing-resistant and increasingly supported by major services.