Password Management: Stop Using Bad Passwords
Most people's password practices are dangerously inadequate. Reused passwords, weak passwords, and no organization. Here's how to fix it.
The Problem
- Use the same password everywhere
- Use simple, guessable passwords
- Write passwords on sticky notes
- Never change passwords
- Forget passwords constantly
The risk:
One breach exposes all accounts. It happens constantly.
The Solution: Password Managers
- Generate strong, unique passwords
- Store them securely (encrypted)
- Auto-fill login forms
- Sync across devices
- Require only one master password
- 1Password — Excellent UX, subscription
- Bitwarden — Free tier available, open source
- LastPass — Popular, free tier available
- Dashlane — User-friendly, premium features
Cost: $0-$5/month. Worth every penny.
Setting Up a Password Manager
- Choose a manager and create account
- Create strong master password (see below)
- Install browser extension and apps
- Import existing passwords (most offer this)
- Start using it for new logins
- Gradually update weak passwords
Creating Strong Passwords
If using a password manager:
Let it generate random passwords. 16+ characters, all character types.
For your master password:
Use a passphrase: "correct-horse-battery-staple" style
- 16+ characters
- Mix of types (letters, numbers, symbols)
- Not based on personal information
- Not a dictionary word
- Unique (never used elsewhere)
Two-Factor Authentication (2FA)
- Something you know (password)
- Something you have (phone, hardware key)
Priority accounts for 2FA:
1. Email (password reset gateway)
2. Financial accounts
3. Social media
4. Cloud storage
Best 2FA methods:
1. Hardware key (Yubikey) — Most secure
2. Authenticator app (Google, Authy)
3. SMS — Better than nothing
For more security guidance: Cloud Security Tips
Password Hygiene
- Use unique password for every account
- Update passwords after breaches
- Enable 2FA where available
- Log out of shared computers
- Review connected apps periodically
- Reuse passwords
- Share passwords via email/text
- Use personal info in passwords
- Save passwords in browsers (use manager instead)
What If You're Breached?
- Change password immediately
- Enable 2FA if not active
- Check other accounts with same password
- Review account for unauthorized activity
- Consider credit freeze if financial