Wirecutter - Stop reusing your passwords

Dana Davis

Reusing passwords on multiple sites is one of the most common mistakes people make online, and it can land you in hot water if a site gets hacked and that password leaks out. Attackers can use that stolen password on other big sites, hoping for a match.

That doesn’t mean you have to remember dozens of unique passwords for all the sites you use. You just need a password manager.

A password manager creates unique, strong passwords and remembers those passwords for you. As a bonus, once you’ve set it up, a password manager lets you log in to nearly any site on your phone with just a fingerprint or facial recognition.

We like 1Password and Bitwarden. Install your password manager on your computer (or as an extension in your web browser) and on your smartphone so your passwords will be accessible wherever you are. Then, browse the web as you normally do, but as you log in to accounts, take a minute to change each password to the new unique one your password manager suggests.

Over a week or two, you’re likely to hit your most important accounts naturally, improving your passwords as you go.

Read more about how to get the most out of your password manager.

Dana Davis

While you’re updating your passwords, turn on two-factor authentication when possible (here’s a directory of sites that support this feature). Two-factor authentication acts like a second lock on top of your password: First you enter your password, and then you enter a one-time code that you receive, for example, as a text message. Once two-factor authentication is up and running, the extra step of entering the code is easy enough, and it makes your accounts much more secure.

At the very least, be sure to turn on two-factor authentication on your email, social, and banking websites. Typically you’ll find this option in the security or settings part of the menu. If the site offers the option to use an app on your phone to get your codes, follow those instructions instead of setting it up to send you a text message. Either way, the feature should take less than five minutes to set up and just seconds to use.

Dana Davis

It’s annoying to wait around while a device updates. But updating is worth the time and effort. Software updates typically fix known security issues. This is such a critical step that modern operating systems enable automatic updates by default, so unless you’ve gone into the settings and turned them off, all you need to do is update whenever you’re asked to. The same goes for any other smart devices you might have, such as security cameras or fitness trackers. If you want to double-check to confirm that your computer is set up properly, head over to our guide to see directions for each operating system.

We’ll be back in your inbox next Monday with more security advice! In the meantime, you can find all our simple online security tips here.