Passwords, MFA & Account Safety

Most account break-ins don't involve clever hacking — they happen because a password was weak, reused, or guessed. Getting the basics right stops the majority of real-world attacks before they start.

• Strong passwords: Use a long passphrase (e.g. "PurpleGoat$Runs42Fast") rather than a short complex one — length matters more than symbols.
• Never reuse passwords: If one site is breached, reused passwords let attackers into every other account you used it on.
• Multi-Factor Authentication (MFA): Adds a second step (a code sent to your phone, or an authenticator app) so a stolen password alone isn't enough to break in. Enable it on email, banking, and social media first.
• Password managers: Tools that generate and remember strong unique passwords for every account, so you only need to remember one master password.

Practical Skill: Audit your own accounts: identify any reused passwords, change them to unique passphrases, and enable MFA on your email account today — it's usually the account that can reset everything else.

=== PERSONAL ACCOUNT SECURITY AUDIT === [ ] Email account has a unique password (not reused anywhere)[ ] Email account has MFA/2-step verification enabled[ ] WhatsApp has two-step verification enabled      (Settings -> Account -> Two-step verification)[ ] Banking/mobile money app has a unique PIN, never shared[ ] Social media accounts have MFA enabled where available[ ] No passwords are written in an unlocked phone Notes app[ ] A password manager (or a written list kept physically safe)    is used instead of memorizing weak, reused passwords === PASSPHRASE VS PASSWORD ===  Weak:    P@ss1  Better:  Purple-Goat-Runs-42  Why:     Longer phrases are far harder to crack, even without           complex symbols, and easier for you to remember.