Why you need a strong password:
If your password or PIN is captured, guessed or stolen, your perpetrator can potentially:
  • send emails from your accounts
  • withdraw money from your bank accounts
  • change files on your computer 
  • steal your identity
Will a strong password completely protect you?
​Strong passwords lower your overall risk of security breaches but they do not replace the need for other effective security controls such as:
  • installing anti-virus software and updates to your operating system as soon as they’re released
  • changing your passwords on a regular basis
What's the key to a strong password?
  • The longer it is, the stronger it is
  • Think of a passphrase that is made up of at least four words, including at least 12 characters: eg: themelbournecupistopsthenation
    Make it meaningful to you but not to anyone else so it is easy to remember
  • Try to use a combination of lower case & capital letters, numerals and symbols
    eg from above:     theM3lbournecup5topsthenat!0n
What NOT to include in your password:
  • repeated characters
  • arbitrarily mixed letters, numbers and symbols 
  • single dictionary words, your address or numeric sequences (such as 1234567)
  • personal information
  • anything you have previously used
What about Password Managers?
  • Password Managers are useful and can be downloaded onto your computer, smartphone or tablet. Some Password Managers will sync across your devices - very useful.
  • Password Managers can not only store your passwords for you, they can also generate and remember secure passwords as well
  • The downside is that if the Password Manager is breached, all your information is accessible so MAKE SURE YOUR MASTER PASSWORD IS VERY STRONG & SECURE
What is two-factor authentication?
  • Two-factor authentication simply means there are two checks in place to prove your identity like a code being sent to your mobile
  • If, for example, your banking password is hacked and you have two-factor authentication activated on your account, the hacker won't be able to gain access to your accounts because BOTH levels of authentication are required.
  • Click here to learn more about two-factor authentication
Password and PIN hygiene:
  • Do NOT use the same password for multiple services or websites
  • Do NOT share your passwords with anyone
  • Do NOT provide your password in response to a phone call or email regardless of how legitimate it might seem
  • Do NOT provide your password to a website you have accessed by following a link in an email - it may be a phishing trap
    Phishing is an attempt to obtain sensitive information such as usernames, passwords and credit card details, often for malicious reasons, by disguising the site as trustworthy
  • Be VERY cautious about using password-protected services on a public computer or over a public wifi hotspot
  • If you think your password may have been compromised, CHANGE IT IMMEDIATELY and CHECK FOR ANY UNAUTHORISED ACTIVITY.
    ​If the same compromised password has been used on another site, create a new password there as well.
Perhaps also consider:
  • Deactivating your accounts 
    - you can always reactivate them later when it is safe to do so
  • Creating new accounts in a false name with a generic photo and only tell your closest friends
  • Explain to your friends and family that you are at risk and ask them to set their privacy settings to 'friends only'
  • Ask your friends to not to accept friend requests from people they don't know.
  • Request that your friends to NOT post information or photos about you or your children online
  • Remind your friends to NEVER give out your phone number, address, email or other social media addresses