How do you follow password management rules?

1 Use a password manager

A password manager is a software tool that generates, stores, and fills in passwords for you. It can help you create unique and complex passwords for each account, without having to memorize them or write them down. A password manager also encrypts your passwords and requires a master password or a biometric authentication to access them. Some password managers also offer features like password sharing, password auditing, and breach alerts. To use a password manager, you need to install it on your devices and browsers, and create a strong master password.

2 Follow the NIST guidelines

The NIST (National Institute of Standards and Technology) is a US agency that sets standards and best practices for cybersecurity, including password management. According to the NIST guidelines, you should use long passwords with at least 12 characters, mixing letters, numbers, and symbols. It's also important to change your passwords regularly, especially if you suspect a breach or compromise. Additionally, you should enable multi-factor authentication (MFA) for your accounts, which adds an extra layer of verification. On the other hand, you should avoid common or predictable passwords such as your name or birthday, as well as reusing the same password for different accounts. Furthermore, you should never share your passwords with anyone or store them in plain text or unsecured locations.

3 Avoid phishing and other scams

Phishing is a type of cyberattack that attempts to deceive you into divulging your passwords or other sensitive information by posing as a legitimate entity, such as a bank, company, or government agency. It can take many forms, such as emails, texts, calls, or websites, and often uses urgency, fear, or curiosity to entice you. To protect yourself from phishing and other scams, be sure to inspect the sender's address, domain name, spelling, and grammar of any message or link you receive. Never click on suspicious or unsolicited links or attachments, or enter your passwords on unfamiliar or unsecured websites. Additionally, verify the identity and authenticity of any person or organization that contacts you and requests your passwords or personal information. Lastly, report any suspicious or fraudulent activity to the relevant authorities or platforms.

4 Educate yourself and others

Learning more about password management and security awareness is an important part of following password management rules. You can do this by reading blogs, articles, books, or podcasts from reputable sources and experts. Additionally, you can take online courses, webinars, or workshops from certified providers or organizations. Joining online communities, forums, or groups that discuss and share password management and security awareness tips and best practices is also helpful. Don't forget to share your knowledge with your friends, family, colleagues, or clients and encourage them to follow password management rules. Remember that password management is a continuous process that requires attention and adaptation - by following these rules you can improve your security awareness and protect yourself from cyberthreats.

5 Here’s what else to consider

This is a space to share examples, stories, or insights that don’t fit into any of the previous sections. What else would you like to add?