Long passwords are stronger than short complicated ones. The UK National Cyber Security Centre (NCSC) recommends three random words, for example CoffeeTrainFish (don't use that one!).
- Make it long and random. Three or more unrelated words, not song lyrics or famous quotes.
- Never reuse a password between work and personal accounts. If one site is breached, criminals try the same password everywhere else.
- Use a password manager to remember them for you, if your organisation allows one.
- Avoid personal details such as names, birthdays, pets or football teams: they're easy to find on social media.
- Never share your password, including with IT staff. We will never ask for it.
Turn on multi-factor authentication too (see Setting up multi-factor authentication): it protects you even if your password leaks.
WEESdesk