Password & MFA Basics
Passwords are the keys to your entire digital life — and most people are still using a small keyring of the same few, over and over. Here's how to fix that without having to memorize anything.
The real problem: reused passwords
It's not that your password is too short — it's that you use the same one in a lot of places. When any single company you have an account with gets breached (and this happens constantly), criminals take that email-and-password combo and try it everywhere else: your bank, your email, your shopping accounts. One leak becomes a master key. This trick even has a name — credential stuffing.
Reusing one password across accounts is like using a single key for your house, your car, and your safe. Copy it once and everything opens.
The fix: a password manager
A password manager is a secure, encrypted app that remembers all your passwords for you. You memorize one strong master password, and it handles the rest — storing a different, long, random password for every account and filling them in automatically when you log in.
That means you finally get what security folks have nagged about for years — a unique strong password everywhere — without having to remember any of them. It's the single highest-impact thing most people can do for their security, and it takes about fifteen minutes to set up.
Turn on multi-factor authentication (MFA)
Multi-factor authentication — sometimes called two-factor authentication or 2FA — adds a second step when you log in, like a code from your phone. It means that even if someone steals your password, it's not enough to get in. They'd also need your phone in their hand.
Turn it on for the accounts that matter most first: your email (because it can reset all your other passwords), your bank, and any account with your money or personal data. When given the choice, an app-based code or a physical key is stronger than a text message — but a text-message code is far better than nothing.
A simple starting plan
- Pick a reputable password manager and set your one master password — make it long and memorable, like a short sentence.
- Let it change your most important passwords first: email, bank, primary shopping accounts.
- Turn on MFA for those same key accounts.
- Work through the rest over time — you don't have to do everything in one sitting.
If picking a manager or setting the recovery options feels daunting, that's a very common place to want a hand — it's one of the most frequent things we help people set up.