Our password is our first line of defense against cybercriminals. True, it’s not the only protection we need (we also recommend that you use Two-Factor Authentication and practice safe online habits), but it’s a start. That’s why you need to create a password that’s strong, memorable (but only to you!), and unique.
Sounds like a chore? It doesn’t have to be. Here are some simple ways you can make your password even better.
First, consider your passwords (and we hope you have more than one!):
- DO NOT include the name of a family member or a beloved pet. If you’ve mentioned either of these online, this information is no longer private, and so it isn’t wise to include them in a password that lets you access your most sensitive data.Your cat’s name is never a strong password.
- Are you using a passphrase? A one-word password is easy to remember, but it’s also easier for a cybercriminal to guess. A passphrase (a memorized phrase consisting of mixed words with or without spaces) will make it much harder for a hacker to gain access to your accounts. For example, what about the line from that song or movie that you always mix up in your head, but have never mentioned to anyone? Or pick three or four things around your house that give you joy: “CoffeemonAmourLlama”. A caveat: stick to something that’s memorable just to you. If you’re using song lyrics, a quote, or other popular saying, make sure they’re not ones that your friends, family and followers would easily guess. Tolkien fans, I see you and your use of “Youshalln0tpass!” Evaluate your passwords and get some tips for making it stronger.
You're almost there - ready to level up?
![Person lifting weight in a gym](https://www.mcgill.ca/cybersafe/files/cybersafe/levelup_resized_400.jpg)
- Discover some common mistakes that people often make when choosing passwords, and how you can make yours better! How you can make an OK password even better
- No time to read? Check out this short video for some additional pointers:
Congratulations - you've now got a buff, new password. But for how long?
Although changing your password frequently has been a long-accepted practice, it’s no longer recommended to change your password unless you suspect it has been compromised. Why? Most people, if forced to change their passwords every few months, generally fall into the habit of creating simpler passwords, or writing them down in obvious places (like sticky notes left under keyboards). Unless you're committed to creating an equally robust password each time, hang on to the one you have.
Of course, this also means keeping it private, and don’t forget to create a strong one for each of your accounts. No matter how creative, how long or random your password is, there’s someone (or something) out there devoting 24 hours a day, 7 days a week, to gaining access to accounts.
Cybercriminals use phishing emails, spoofed websites and login pages that look just like the real deal: Malicious software can grab and monitor keypad activity, so even the best password can be captured and compromised. If this happens, having unique passwords for each of your accounts will save you a world of hassle.