When one password puts multiple accounts at risk
Strong and complex passwords are key when it comes to protecting access to online services. However, they are often difficult to remember. For this precise reason, many people use the same password for several accounts or create passwords based on a recurring pattern. Both of these approaches significantly reduce security, and the danger of reusing passwords is often underestimated.
When passwords are stolen or leaked from a service, hackers often use automated tools to check whether the same login details work on other platforms.
Using one password for multiple accounts is a major security risk
If you reuse your passwords, you are making it particularly easy for these attackers to hack your accounts. An incident involving a single service can quickly provide access to other accounts. Email accounts are especially critical, as they can often be used to reset passwords for other services.
Systematic passwords are also problematic
It is not only identical passwords that pose a risk; those with similar structures do, too. Using a pattern where each password differs by just one number or an extra character may feel like a neat solution, but it does not provide real security. If one of your passwords is discovered, hackers can often guess similar variants with little effort. For this reason, slightly altering your passwords is not enough – it is vital to use a separate password for each service.
Password managers can help you – with one caveat
A password manager can ensure you use a separate, strong password for each service. These tools help you to create, save, manage and insert complex passwords. This resolves a large part of the problem, as you no longer need to remember numerous complicated sequences. However, a password manager only provides effective protection if the master password is strong enough. If this falls into the wrong hands, all your saved login details may be compromised.
What constitutes good password practice?
The NCSC recommends using passwords consisting of at least 12 characters, including upper- and lower-case letters, numbers and, if possible, special characters. It is also important not to reuse passwords and to activate two-factor authentication wherever possible. This creates an additional hurdle and significantly increases the effort required by hackers. Some login details need particular protection, such as those for your email account.
Using passwords securely may require a little more vigilance. However, this effort is not just a minor detail – it is an important step towards protecting your accounts, data and cybersecurity. Leaked login details are often exploited for years after the initial incident, which is why it is vital to handle passwords carefully.
This year’s S-U-P-E-R.ch national awareness campaign, "SUPER, right?", reminds us to use a different password for every account.