News and Analysis

The article argues that most standard advice on password security may be flawed, making accounts even less safe. It says unique passwords and multifactor authentication are good practice, as is using a password manager. However, the need for regular password changes, overly complex characters and sequences, and a avoidance of dictionary words can weaken security by encouraging users to rely on easily guessable, simple patterns to remember them. It recommends passwords of at least 12 characters, using ‘three random words’ advice, and focusing on multifactor authentication.