9 password security tips you were overlooking

Your password is your first line of defence against cybercriminals. Still, many people rely on weak, recycled or easily guessable passwords, leaving personal and professional accounts at risk. Having strong password security practices doesn’t have to be complicated.  

From creating complex passwords to using password managers and enabling two-factor authentication, these practical password security tips will help you protect your online accounts and keep your personal information safe. 

• Create strong, unique passwords: Use long combinations of letters, numbers, and symbols, or consider passphrases for added security

• Enable two-factor authentication (2FA): Add an extra layer of protection to your accounts to prevent unauthorized access. 

• Use a password manager: Safely store and generate unique passwords for every account, reducing the risk of reuse. 

• Stay vigilant and proactive: Update passwords regularly, avoid phishing scams, secure devices and networks, and educate others on best practices. 

Cybercrime is on the rise, and weak passwords are often the easiest way for hackers to gain access to sensitive information. According to the Verizon Data Breach Investigations Report 2025, a staggering 88% of data breaches involve weak or stolen passwords. Poor password security can lead to: 

• Identity theft and fraud 

• Financial loss 

• Privacy breaches on email, social media, and banking accounts 

Protecting your passwords is essential for all your online accounts, not just banking or work email. 

A strong, well-managed password is the first line of defense between your personal information and cybercriminals. Taking a few smart precautions can drastically reduce your risk. The following tips will help you create, store, and protect passwords so you can keep your online accounts and your identity safe.

1. Use long and complex passphrases

Creating a strong password is your first line of defence. Keep these tips in mind: 

• Length matters: Aim for at least 12–16 characters. 

• Mix it up: Include uppercase, lowercase, numbers, and symbols. 

• Avoid obvious choices: No dictionary words, repeated characters, or personal info. 

• Try passphrases: Memorable combinations of words and symbols, e.g., CoffeeTableBlue7!Sunset. 

2. Avoid password recycling

Even small errors can make your accounts vulnerable. Avoid: 

• Sequential numbers like 123456 or repeated characters like aaaaaa. 

• Birthdays, pet names, or other easily guessed personal details. 

• Reusing passwords across multiple accounts. 

For reference, check lists of commonly hacked passwords, such as the NordPass Top 200 Common Passwords 2025.

3. Never use personally identifiable information

Avoid including any details that someone could easily discover about you, such as your name, birthday, address, phone number, or pet’s name, in your passwords. Hackers often scour social media profiles and public records to guess these details. Using personal information makes it far easier for them to break into your accounts.

Instead, choose a random combination of letters, numbers, and symbols or use a memorable but unrelated passphrase for stronger protection.

4. Enable two-factor identification

Two-factor authentication adds an extra layer of protection beyond your password:

• Makes it much harder for hackers to access your accounts. 

• Options include SMS codes, authenticator apps, and hardware keys. 

• Accounts with 2FA are significantly less likely to be compromised. 

Enable 2FA on all major accounts, especially email, banking, and social media.

5. Use a password manager

Managing multiple strong passwords is far simpler with a reliable password manager. These tools can generate unique, complex passwords for every account, store them securely, and even autofill your logins so you don’t have to remember each one.

When choosing a password manager, look for one that uses robust encryption standards to keep your data protected.

6. Regularly update passwords

Even strong passwords can be compromised over time. Stay safe by: 

• Updating critical accounts (banking, email) every 3–6 months. 

• Watching for breach notifications or suspicious activity. 

• Check services like HaveIBeenPwned to see if your credentials have been exposed.

7. Spot and avoid phishing attempts

Phishing attacks aim to steal passwords through fake emails or websites. Protect yourself by: 

• Checking URLs carefully before entering credentials. 

• Avoiding suspicious links or attachments. 

• Use browser security features and spam filters to block malicious messages. 

8. Protect your devices

Passwords aren’t enough if your devices or networks are insecure: 

• Keep software, browsers, and apps updated. 

• Avoid logging in on public WiFi without a VPN. 

• Use device passcodes or biometric authentication (fingerprint/face ID). 

9. Never share passwords

Never share your passwords with anyone, even trusted friends or family members. Once a password is shared, you lose control over who can access your accounts and how securely they’re stored. Shared credentials can be accidentally leaked, reused, or exposed in ways you can’t monitor.

If you need to grant someone temporary access, such as to a streaming service, use features like guest accounts or secure password-sharing options within a password manager instead of revealing your actual login details.

Strong passwords are just the beginning of safer browsing. For even more protection across all your devices, Virgin Media Essential and Advanced Security offers next-level online safety powered by F-Secure. You can cover as many mobiles, tablets, and computers as you like, free for the first three months.

Advanced Security not only blocks new threats but also removes any existing malware, helping keep your devices clean and your data private. After the trial, continued protection costs just £3 a month or £30 a year, giving you peace of mind that your passwords, personal details, and online activity stay secure.