Use a password manager
Humans are bad at inventing and remembering 80 unique secrets. Managers generate long random passwords and autofill the right site — which also helps you spot phishing domains.
← Breach Safety · // PASSWORD PLAYBOOK
Password & 2FA playbook
Most “hacks” of regular people are reused passwords and missing MFA — not Hollywood malware. Fix those two and your risk drops hard.
One password per account
Never reuse. Especially never reuse the password that protects your email — email is the reset key to everything else.
Prefer passkeys / app MFA
Passkeys and authenticator apps beat SMS. Keep backup codes offline. Don’t approve MFA prompts you didn’t start.
Check for known leaks
Run important passwords through a private breach check. If anything hits, rotate it everywhere it was used.
Separate high-value accounts
Banking, email, Apple/Google ID, and work accounts deserve unique passwords, MFA, and extra caution on recovery options.