Five things non-technical users get wrong about passwords

It comes up every week

In the course of doing remote support I see the same password mistakes over and over. Here are the five most common ones and what to do instead.

1. Using the same password everywhere — one breach exposes everything
2. Making it memorable instead of strong — attackers know your dog's name too
3. Changing it slightly each time — Password1 to Password2 fools nobody
4. Writing it on a sticky note — use a password manager instead
5. Thinking it won't happen to them — it's automated, it's not personal

The fix

Get a password manager. Bitwarden is free and I recommend it to everyone.