In fact, you should ignore the ’90 day’ password rule – as experts warn, the ‘myth’ is an easy way to become an instant ‘victim’

While they may seem like helpful tips, many “password myths” are actually dangerous mistakes.

This includes the ’90 day’ rule, which encourages users to change their passwords every 90 days.

two

Experts say you should only change your login credentials when necessary, as repetition can lead to weak or reused passwords.

Just change yours passwords after learning that your login credentials have been compromised.

Another myth claims that a minimum of 12 characters is effective, but experts say that’s no longer enough.

Instead, a strong password should have at least 16 characters and contains a healthy mix of uppercase and lowercase letters, numbers, and special characters such as exclamation marks or dollar signs.

Avoid names, dates of birth, and other personal information that is easy to find online. Inexperienced hackers often rely on details like these to break into accounts.

It is also vital that you do not repeat passwords across multiple sites.

Once criminals gain access to login credentials exposed in a data breach, they can use them repeatedly and gain access to multiple accounts at once.

Experts also discourage users from creating passwords that are nearly identical except for minor variations such as extra numbers of symbols.

If you’re struggling to create strong, unique passwords, there’s an easy solution.

Cybersecurity companies like Keeper Security and McAfee offer free password and passphrase generators.

The output is based on the details provided, such as the desired password length and the number of letters and other characters.

If you care about keeping track of all your login credentials, feel free to use a password manager, which keeps your information under lock and key.

This way, you only need to remember one password to access the rest of your login credentials.

In addition to using strong passwords, you should enable passkeys whenever you can.

A passkey allows you to log in using biometric information such as a fingerprint or facial scan.

This makes it nearly impossible for a hacker to breach your accounts since the biometrics are unique to you.

two

Amazon is just one retailer that has started allowing users to log in with passkeys.

The company announced the measure in October 2023, promising “an easy and safer way to log into your Amazon account.”

You should also enable multi-factor authentication (MFA) on sites that allow it.

MFA requires you to prove your identity in two or more ways before accessing your accounts.

This usually involves sending a code to your email address or phone number, meaning the devices serve as another authenticator.