7 rules to keep your passwords secure in 2024, according to experts

In an environment that is increasingly digital and vulnerable to cyber attacks, protecting your accounts and personal data is essential. Fortunately, cybersecurity experts such as the US National Institute of Standards and Technology (NIST) and the Cybersecurity and Infrastructure Security Agency (CISA) have provided practical guidance for increase the security of your passwords. Here are seven basic rules that can make a big difference in the security of your digital life today.

1. Create long and complex passwords

One of the fundamental principles of digital security is that the length of a password is key to its effectiveness. Experts currently recommend using passwords that are at least 15 characters long. While including complex characters and numbers used to be a priority, today password length is considered to play an even more important role in its security.

An effective strategy is to use a “passphrase” consisting of a combination of several random words, such as “Dog-Coffee!Mountain9”. This way you will create a password that is difficult to crack but relatively easy to remember. The key is that it is long enough and contains a combination of letters, numbers and symbols, making it more reliable.

2. Use a password manager

If you have a lot of accounts, it’s best to let a password manager do the heavy lifting. These programs store your passwords in a secure, encrypted database and help you create unique and complex passwords for each site. They also protect you from phishing attempts by not entering your credentials on fake websites. You can use a password manager on all your devices and sync passwords securely. What’s more, while you might store all your passwords in a notepad, a digital manager makes the job much easier and safer.

3. Never reuse passwords

Using the same password for everything is a common and very dangerous practice. Because? If one site is hacked and your credentials are exposed, attackers can use the same information on other sites. A good password manager will warn you if you’re using a duplicate password and offer a unique alternative. It’s tempting to use the same key on multiple platforms, but this only makes it easier for hackers.

4. Avoid password prompts and security questions.

Password hints and security questions such as “What is your pet’s name?” or “Where were you born?” – outdated and not very secure options, especially if you have personal information on social networks. Attackers can guess these answers, making your accounts more vulnerable. Instead of using these methods, the ideal is to store your passwords in a manager that won’t force you to remember more data than necessary.

5. Change default passwords.

Devices such as Wi-Fi routers, security cameras, and smart home systems often have default passwords that are easy for attackers to guess. Be sure to replace these passwords with stronger ones immediately after installing the device. This will protect your network and reduce the risk of unauthorized access.

6. Enable multi-factor authentication (MFA).

Multi-factor authentication adds an extra layer of security by requiring an additional code when logging into an important account. This code can be sent to your phone or generated in an authentication app. And while receiving a code via SMS is better than nothing, authentication apps are a safer option. With multi-factor authentication, even if someone knows your password, they will still need an additional code to log in. This is critical for sensitive accounts such as bank, email or social media accounts.

7. Don’t change passwords without reason.

It used to be that changing passwords from time to time was ideal. But in fact, constantly changing passwords can do more harm than good, since people often choose combinations that are easy to remember and predictable. Experts recommend that if your password is strong and unique, there is no reason to change it unless you suspect a potential security breach. Now, if the page or your IT department insists that you need to change it, use the page manager to create a new one that meets their requirements.