Accounts, passwords and backups
How to create stronger, unique passwords
A practical approach to passwords that reduces reuse without expecting you to remember everything.
What you will learn
You'll understand why length and uniqueness matter, and how a password manager may help.
Before you continue
Stop and get help before changing important passwords if you are unsure how account recovery works or whether a password manager contains the current details.
Make every important password unique
When one password is reused, a breach at one service can put other accounts at risk. Start with email, banking and accounts that can reset other passwords.
Prefer length over tricks
Long passwords are generally harder to guess than short ones with predictable substitutions. Avoid names, birthdays and information that other people can easily discover.
How long is long enough
As a general guide, aim for at least 12 to 14 characters on an important account, and longer where a service allows it. A random string of unrelated words is often easier to type and remember than a short string of substituted symbols, while still being harder to guess.
Use a password manager if it suits you
A reputable password manager can create and store unique passwords. Take time to understand its recovery process before moving every account.
Change passwords for a reason
Replace a password if it has been exposed, reused or shared with someone who no longer needs it. Routine changes can be less useful if they lead to small, predictable variations.
Add another sign-in check
Turn on two-factor authentication for important accounts where it is available.
What to expect
You can identify your priority accounts and choose a manageable way to give each one a unique password.
Sources and further reading
- Protect yourself: Passphrases · Australian Signals Directorate
Current Australian guidance about long, unique passphrases.