Password protection
A different strong password for every account.
Press play when you’re ready. The next lesson won’t start automatically.
One account. One password.
One stolen password should not open all your accounts. A password manager is a tool that creates and remembers strong passwords, so you do not have to remember each one.
Remember these three things
- Use a unique password for each account that needs one.
- A password manager can help create and store passwords. Protect the manager itself using its recommended security settings.
- Where a service offers a passkey, consider using it. Passkeys provide a different way to sign in without typing a password.
Further guidance: NCSC: managing your passwords and passkeys. Written guidance checked against this source on .
Try the three-question quizRead the transcript
I use one really strong password everywhere, easier to remember.
Strong helps, but unique matters more.
If one site is breached, criminals often try that login on other accounts.
One stolen key should not open the whole house.
Exactly, use different passwords for important accounts and let a trusted password manager remember them.
So should we make a new password every month?
Not just because the calendar says so, change it if it may be exposed, reused or compromised, then sign out other sessions.
Visual description
Cache proposes reusing a password. A demonstration phone shows the same password being used for shopping, email and banking. A password vault then shows a different generated password for each account; the examples are not passwords to copy. 404 asks about monthly changes. The account-security screen demonstrates changing a password when it might be exposed, reused or compromised, then signing out other sessions. The final portrait card repeats: A different password for each account. Let a password manager help.
Next: Extra sign-in protection
An extra check for your account. Keep login codes private.