Has your email address and/or password been compromised?
If you discover you need to change passwords – or want to take preventive security measures – use these tips.
At a minimum, your passwords should be:
- Long – at least 16 characters long (even longer is better)
- Random – use a combination of mixed-case letters, numbers, and symbols (the strongest!) or a passphrase of 4-7 random words
- Unique – used for one and only one account
Do
- Use Multi-Factor Authentication wherever possible – especially when accessing websites linked to financial records.
- Install a password manager on every device to keep your passwords in a secure, encrypted place.
- Frequently change your passwords using the above criteria.
Don't
- Enter passwords on devices that don’t belong to you – they may have malware installed that steals your passwords.
- Enter passwords when using unsecured Wi-Fi connections like the airport or a coffee shop – hackers can intercept your passwords using unsecured connections.
- Use password “hints” or security questions that may aid hackers in finding out your password.
Need help knowing if your passwords are strong or weak? Here are common examples:
| WEAK | STRONG |
|---|---|
| Uses personal information like your name, birthdate, address, etc. Mary1967 or Yosemite0625 |
Long, uses random combinations. D0j^hi$to4?i1 |
| Variance in a single character across accounts. Bill0817 to Bi1l0817 |
A sequence of words turned into a passphrase. Fly Me to the Moon into f1^m3+0+:3m00[ |
| Common or short phrases. Password or 123456 or Apple |
Uses mnemonics for memorization. Every Halloween, we watch Nightmare on Elm Street and Friday the 13th. Into eHwwn^eS&f_13 |