The problem with reused passwords
When a website suffers a data breach, criminals try the stolen email and password combinations on other sites. If you use the same password in several places, one breach can expose many of your accounts.
How a password manager helps
A password manager is a secure app that stores your passwords in an encrypted vault. You remember one strong main password, and the app fills in the rest. Many phones and web browsers now include a built-in password manager.
- Creates long, unique passwords for every account.
- Fills them in automatically on the correct website.
- Warns you if a saved password appears in a known breach.
- Syncs securely between your phone, tablet, and computer.
Getting started safely
Choose a well-established password manager from a reputable company, or use the one built into your device. Create a main password that is long and memorable — a short phrase of four or five unrelated words works well. Write it down and store it somewhere physically secure at home.
Add a second layer: two-step verification
Two-step verification asks for a short code — usually sent to your phone — in addition to your password. Even if someone learns your password, they cannot get in without that code. Turn it on for your email first, since email is often used to reset every other account.
