Managing your passwords — by NCSC (UK)

beginnerpageLink only (©)

Advice on using a unique strong password per account and why to enable two-step verification first. Describes how browser-based and third-party password managers store, generate and autofill passwords and can warn about breaches.

Quick steps

Turn on two-step verification for email and important accounts
Choose a built-in or third-party password manager
Let it generate a unique password for each account
Protect the manager with a strong main password and 2SV
Use passkeys where a site offers them

Paraphrased from the source. Menus can differ by version, so check the original for full details.

Read the full article on ncsc.gov.uk

Source: Managing your passwords by NCSC (UK). Licence: Link only (©).

Source reviewed: 2026-11-02
Link checked: 2026-11-02
Tested hands-on: Not by Oddbyte.Me

password managerpasskeyspasswords

More in Passwords & 2FA

Creating Strong Passwords — by Electronic Frontier Foundation

beginnerpage

Part of EFF's Surveillance Self-Defense guide. It argues for a different password on every account to limit damage from leaks, with a password manager doing the work, and a random multi-word passphrase for high-value logins such as your device and the manager itself.

Three random words — by NCSC (UK)

beginnerpage

The NCSC shows how chaining three unrelated words makes a password that is hard to crack but still memorable. It also warns against personal details and predictable character swaps, and mentions password managers as an alternative.

Turn on 2-step verification (2SV) — by NCSC (UK)

beginnerpage

Explains how a second check at login keeps criminals out of email, banking and social media accounts even if they have your password. Points to setup guides for popular services such as Gmail, Outlook, Instagram, Amazon and Apple ID.