Part 2 - Cybersecurity for Everyone: Secure Passwords and Why They Matter More Than You Think

If there is one thing that protects almost everything you do online, it is your password.

Your email, social media, online shopping, banking, work accounts, and even your smart devices all rely on passwords. Yet passwords are also one of the most common ways attackers gain access to accounts.

In this article, I will explain:

Why passwords are still so important
What makes a password secure
Common mistakes people make
How to manage passwords safely without needing to remember dozens of them

No technical knowledge required.

Why Passwords Are a Big Target

Most online attacks do not start with someone "hacking" in the way films portray it. Instead, attackers often use:

Passwords leaked in data breaches
Passwords guessed using common patterns
Passwords reused across multiple websites

If an attacker gets access to one of your passwords, they will often try that same password on:

Your email account
Social media
Online shops
Cloud storage
Banking and financial platforms

This is why passwords matter far more than people realise.

What Makes a Password Secure?

A secure password has three key characteristics:

1. Length

Longer passwords are much harder to crack.

Short passwords (8 characters or less) are weak
Aim for at least 12–16 characters
Longer is always better

2. Unpredictability

Avoid anything that can be guessed or researched.

Do not use:

Names of family members or pets
Birthdays or years
Favourite football teams
Simple patterns like Password123

Attackers know people use these patterns.

3. Uniqueness

This is the most important rule:

Every account must have its own unique password.

If you reuse passwords and one site is breached, attackers can gain access to many of your other accounts.

Common Password Mistakes

These mistakes are extremely common and very risky:

Reusing the same password everywhere
Making small variations (e.g. Password1, Password2)
Storing passwords in notes or spreadsheets
Sharing passwords with others
Using the same password for email and other accounts

Your email password is especially critical. If someone gets into your email, they can reset passwords for many other services.

Why "I've Never Been Hacked" Is Risky Thinking

Many people believe they are safe because they have never noticed a problem.

In reality:

Accounts can be accessed quietly
Data can be copied without you knowing
Attackers may wait before taking action
Breached data can be used months or years later

Cybersecurity is about reducing risk, not reacting after something goes wrong.

How Password Managers Solve the Problem

Remembering dozens of long, unique passwords is unrealistic.

This is where password managers help.

A password manager:

Generates strong, unique passwords for you
Stores them securely in an encrypted vault
Autofills passwords on websites and apps
Requires you to remember one strong master password

Popular examples include:

1Password - I have personal experience using this one and it's my go to and recommendation for everyone.
Bitwarden - I haven't used this personally.
Dashlane - I know some people who use this, and it's similar to 1Password.
Apple iCloud Keychain
Google Password Manager

Using a password manager is far safer than reusing passwords or writing them down.

What About Writing Passwords Down?

... in a notebook hidden in your wardrobe? No. Don't do it. You are leaving yourself open to exposing your password data, which anyone can access. This is especially the case when:

The notebook can be lost or seen
Passwords are not unique
You have many accounts

A reputable password manager is the safest long-term option for most people.

Simple Steps You Can Take Today

You do not need to fix everything at once. Start here:

Sign up for a password manager first, and centralise all your credentials
Change the password for your email account first
Ensure your email password is long and unique
Stop reusing passwords across sites
Update passwords for important accounts (banking, shopping, social media)

Small steps make a big difference.

What’s Coming Next

In the next article, we will cover Two-Factor Authentication (2FA) - a simple extra step that protects your accounts even if a password is stolen.

This is one of the most effective security measures available and is easier to set up than many people think.