Password & 2FA Tips

Keeping your online accounts secure is more important than ever. Strong passwords and Two-Factor Authentication (2FA) are the easiest and most effective ways to protect yourself from fraud, scams, and unauthorised access.

This guide explains how to create safer passwords, how to store them, and why enabling 2FA is one of the best steps you can take to keep your personal information secure.

• Access your email or social media
• Order items in your name
• View or change billing details
• Attempt to access your banking apps
• Lock you out of your own accounts

Strong passwords make it much harder for anyone to break in.

How to Create a Strong Password

A good password should be:

Long

Aim for at least 12 characters, preferably more.

Unique

Never reuse the same password on multiple websites.

A mix of characters

Use upper and lower case letters, numbers, and symbols.

Not guessable

Avoid names, birthdays, addresses, favourite teams, or anything that can be found on social media.

Avoid Common Mistakes

• Don’t use names of children, pets, or partners
• Don’t use words like password, welcome, admin
• Don’t reuse your Wi-Fi password for other services
• Don’t leave passwords on sticky notes or unlocked notes on your device
• Don’t share passwords through text message or social media

Using a Password Manager

A password manager stores all your passwords securely so you don’t have to remember them.

You only need one strong master password, and the manager handles the rest.

Benefits include:

• Generates strong passwords for you
• Stores them safely
• Fills them automatically
• Syncs across your devices

Popular trusted options include:

• 1Password
• Bitwarden (free option available)
• LastPass
• Dashlane

Using a password manager is one of the easiest ways to stay secure.

What Is Two-Factor Authentication (2FA)?

2FA adds an extra layer of protection to your accounts.

Even if someone knows your password, they can’t log in without your second step.

After entering your password, you may be asked to confirm using:

• A 6-digit code from an authentication app
• A text message code
• A pop-up approval on your phone
• A physical security key

This keeps your accounts far more secure than using a password alone.

Where Should You Enable 2FA?

Enable 2FA on any account that contains private or sensitive information, such as:

• Email accounts
• Online banking
• Shopping accounts (Amazon, eBay, PayPal)
• Social media
• Cloud storage (Google Drive, iCloud, OneDrive)
• Password managers

If 2FA is available, you should use it.

Best 2FA Methods (Ranked)

From most secure to least secure:

• Authenticator App (Google Authenticator, Microsoft Authenticator, Authy)
• Backup Codes (store securely)
• Text Message (SMS)
• Email codes

SMS and email are still useful and much better than no 2FA at all, but authenticator apps provide stronger protection.

What to Do If You Lose Access to 2FA

Most services offer backup options:

• Print or save backup codes
• Add a second device to your authenticator app
• Add a recovery email or phone number
• Store copies in your password manager

If you lose access to your 2FA method, these backups help you recover your account safely.