Which habit best protects your online accounts?

Options

1. Using the same short password everywhere to remember it
2. Long, unique passwords in a password manager, plus MFA (Correct option)
3. Writing the password into the account name
4. Sharing it only with friends you trust

Answer

Using a long, unique password for each account (stored in a password manager) and turning on multi-factor authentication

Why

People reuse passwords, so one breached site exposes all the others (credential stuffing).

A password manager creates and remembers long unique passwords. OWASP's guidance is to allow long passphrases (at least 64 characters).

MFA adds a second proof, so a stolen password alone is not enough.

Remember

Unique long passwords + a manager + MFA.

Key terms

• MFA
• Credential stuffing
• Password hashing
• Authentication