Strengthen Your Password Security on These 3 Crucial Accounts

Let’s face it, you’re online right now, refreshing apps and looking for news. If you’re scrolling anyway, maybe try fixing something in your life—in 15 minutes or less. (A previous suggestion: Connect with one old colleague or boss.) Here’s our latest:

There are two things you need to do to beef up your online security: Create a long, unique password and turn on two-factor authentication for each account.

A Verizon analysis logged over 10,000 breaches in 2024, a record high. And a survey by security company Yubico found that over 70% of respondents had been exposed to cyberattacks within the past year.

Yes, fortifying your entire digital life can be exhausting. The average person juggles hundreds of passwords. A password manager is the best way to manage them, but it can take days to configure. Forget that for now, and just focus on three key accounts: your bank, email and phone.

Bank

If the password to your bank account isn’t unique and strong—the longer, the better—change it now. Reused passwords are a hacker’s best friend.

When possible, use biometrics (face or fingerprint) to access your banking apps. Apple now lets you add a layer of Face ID or Touch ID protection to any iPhone app.

Verify your contact information is up-to-date, then turn on two-factor authentication in your bank’s security settings. Some banking apps only ask you for a second factor when they can’t be sure you’re you.

Don’t forget your retirement and health savings apps, or payment apps such as Venmo and PayPal. Own cryptocurrency? That’s harder to reclaim if stolen. Robinhood lets you set a custom PIN to secure your wallet.

Bonus suggestion: Freeze your credit to prevent identity thieves from opening credit cards or taking out loans in your name.

Email

Should hackers gain entry into your email, they could similarly infiltrate your other accounts, as this platform is commonly employed for password recovery purposes.

Google's Gmail stands out as the leading email service. Safeguarding your Gmail account will safeguard your other Google applications too. A comprehensive review of crucial configurations can be found through the company’s Security Checkup feature. Additionally, make sure to enable two-step verification for enhanced protection.

Outlook and Yahoo offer their own tips for protecting your email, including adding a recovery email or mobile number.

The most significant danger with emails comes from phishing attempts—and generative AI has enhanced these deceptive email assaults, making them even more complex. Before you click on any links or download attachments, pause for a moment. Should an email appear as though it originates from your bank or another service provider, navigate directly to their official site rather than using the link provided within the message.

If you're feeling up for it, enhance your email security by using a device such as Yubico’s YubiKey 5C as an additional authentication method.

Phone

Initially, safeguard your telephone number by setting up a Personal Identification Number (PIN) for your AT&T, Verizon, or T-Mobile account. Doing so helps stop unauthorized individuals from commandeering your number to obtain your two-factor authentication codes.

Then, secure the cloud account linked to your smartphone—the repository for countless photos, contacts, messages, and additional data. If you're an iPhone user, safeguard your Apple ID. (For Android users, protect your Google account, as mentioned earlier in the Gmail segment.)

For your Apple ID, turn on two-factor authentication in Settings. Review your trusted devices and make sure the trusted phone number matches your current number.

Your iPhone's passcode has the ability to alter your Apple ID password—a tactic that smartphone thieves have exploited with significant impact, as highlighted in our report from last year. Ensure you safeguard your personal identification number (PIN) and enhance your security further by setting up a stronger passcode through the Face ID & Passcode settings.

Suggestion for improvement: Enable Stolen Device Protection to restrict your passcode's capabilities.

Send an email to Nicole Nguyen at nicole.nguyen@wsj.com