Your password is the key to your digital life. Email, banking, social media, work documents, cloud storage — everything is behind a password. A weak password is like leaving your front door open with the key on the doorstep.

In this blog, we share practical tips and smart tricks for creating, managing and securing your passwords. From the classic password rules to the modern password manager — everything you need to know to protect your online identity.

The classic password rules — what really works

Minimum length of 12 characters

Longer passwords are exponentially harder to crack. Each additional character makes the search space many times larger.

Use a mix of characters

Combine uppercase letters, lowercase letters, numbers and special characters. This makes the password much harder to guess.

No personal information

Avoid birthdays, names of pets, addresses or other personal data. This information is easy to find for attackers.

Use a unique password per account

If one account is hacked, your other accounts remain safe. This is the golden rule of password security.

Change after data breaches

If a service reports a data breach, change your password immediately. Use the website Have I Been Pwned to check if your data has been leaked.

Password manager interface op laptop scherm

Password managers: the best trick for modern security

Remembering 100 unique, complex passwords is impossible for a human. That is why a password manager is the best investment in your digital security.

A password manager generates strong passwords, stores them in an encrypted vault and automatically fills them in on websites. You only need to remember one master password — the key to your vault.

Popular options include Bitwarden, 1Password, Dashlane and the password manager in Microsoft Edge. Many of these are free for personal use. For businesses, we recommend a business password manager with central management and policies.

Tip from ICT Teamwork

Use a password manager for all work accounts too. Ask us about the possibilities for managing passwords within your organisation.

Two-factor authentication (2FA) — an extra layer of protection

Even the best password can be stolen. That is why two-factor authentication is essential. With 2FA, you need a second verification — such as a code on your phone or a biometric check — in addition to your password.

Enable 2FA everywhere it is offered: email, banking, cloud storage, social media, work accounts. Apps like Microsoft Authenticator, Google Authenticator or Authy make this easy and secure.

Avoid SMS-based 2FA if possible — SMS is vulnerable to SIM swapping attacks. Prefer app-based 2FA or a hardware security key like a YubiKey.

Smart password tricks for easy remembering

The passphrase method

Use a sentence of 4-5 random words instead of a complex password. Example: "CorrectHorseBatteryStaple!23". Long, easy to remember and hard to crack.

Replace letters with numbers

A classic but effective trick: a = 4, e = 3, i = 1, o = 0, s = 5. This adds complexity without making the password much harder to remember.

Add a unique suffix per website

Use a base password and add a suffix for each website. Example: base + "Amz" for Amazon, base + "Ggl" for Google. This makes passwords unique yet recognisable.

Use a password generator

Let the password manager or an online generator do the work. Length: 16-20 characters, with all types of characters. You never need to remember it anyway — the manager does that.

What absolutely NOT to do

Do not use the same password for multiple accounts

Do not use simple passwords like "123456" or "password"

Do not write passwords on a post-it note on your screen

Do not share passwords via email or chat

Do not use passwords based on personal information that is easy to find

Do not ignore notifications about data breaches

In short: your password checklist

Use at least 12 characters per password

Use a mix of letters, numbers and special characters

Use a unique password for each account

Use a password manager for management

Enable two-factor authentication everywhere

Change passwords after known data breaches

Check regularly with Have I Been Pwned

Use a strong master password for the password manager

Need help with password management?

Let us set up a password manager for your entire team.

From choosing the right tool to rollout and training — we ensure that every employee works safely.

Request free advice

Password tips & tricks