Skip to main content

How to Stay Safe Online


Strong Passwords and Two-Factor Authentication

If you only do two things to protect yourself online, let them be this:

  • Use strong, unique passwords

  • Turn on two-factor authentication (2FA)

These might sound simple, but they’re powerful — and for most people, they’re enough to stay safe in everyday life.

What makes a strong password?

A strong password is one that:

  • Is long — at least 12–16 characters

  • Is unique — used only in one place

  • Looks random — not based on something someone could guess about you

A lot of people use phrases like IAlwaysForgetMyBankLogin2024. It sounds long and personal, but that’s also the problem — it’s guessable. If you use a similar phrase for other sites (like IAlwaysForgetMySocialLogin2024), it becomes a pattern. And patterns are easy to break.

Instead, go for something that doesn’t relate to you at all:

🟢 Ocean-Ladder-Bottle-Swim!53
🟢 FuzzyLamp12$CactusRun
🟢 z!X4eR#tUnicorn-Skate

You don’t need to remember them all. That’s where a password manager helps.

Use a password manager

A password manager creates and remembers strong passwords for you. You only need to remember one master password — the rest is automatic.

Recommended tools:

  • KeePass (free and open-source, desktop-first, very secure)

  • Bitwarden (also has a free plan, and a paid version with more features)

  • 1Password (paid, polished and works across all devices)

Some are free. Some cost a little each year. But they’re worth it — especially if you log into lots of websites or want to use them across your phone, laptop, or tablet. They save time and keep you safer.

What is Two-Factor Authentication (2FA)?

Think of 2FA as a second lock. Even if someone knows your password, they still need something else — a second proof that it’s really you.

Usually this second step is a short, time-sensitive code. You enter your password, then you’re asked for a code that only you have access to.

Where does that code come from?

The most secure way is an authenticator app on your phone:

  • Google Authenticator

  • Microsoft Authenticator

These apps generate a new code every 30 seconds. No internet needed. You just open the app and copy the code.

Some websites still offer to send the code by text message (SMS) or email — that’s better than nothing, but less secure. Texts can be intercepted.

Why strong passwords and 2FA matter

Good password habits (sometimes called password hygiene) are like brushing your teeth — they protect you from problems down the line.
Bad habits — like reusing the same password or using something easy to guess — are how most people get hacked.

But here’s the important bit:

If you use a strong password and have 2FA turned on, the chances of someone breaking into your account are very, very low.

It’s not impossible, but someone would have to put in a serious amount of work just to target you. That’s rare. Most attackers are looking for easy wins — reused passwords, old logins from leaks, or accounts with no 2FA at all.

What if your data has already been leaked?

You can check at HaveIBeenPwned.com. It’s free and safe to use.

If you find your email in a leak:

  1. Change the password for that account

  2. Don’t reuse that password anywhere else

  3. Turn on 2FA to stop future attacks

Final thoughts

Security doesn’t have to be hard.

  • Start by making your main accounts (like email and banking) more secure

  • Use a password manager — even if it feels strange at first

  • Turn on 2FA wherever it’s offered

These are small steps, but they add up to real protection. You don’t need to be a security expert. Just a little care, taken early, makes a big difference.

And if you’re not sure where to start — ask. That’s what we’re here for.

Comments

Popular posts from this blog

When Should a Child Get Their First Smartphone?

Not long ago, The Journal posed a question: “What age should children get their first smartphone?” The replies came in fast—hundreds of them. Some were thoughtful, others defensive. A few were angry. It didn’t take long for the conversation to drift from the question itself to something deeper: trust, fear, control, and the pressure modern parents feel. I've been sitting with that discussion for a while. Not to add more heat, but to try and understand what’s really going on underneath. Because this isn’t just about smartphones. It’s about the kind of culture we’re shaping—for our children, and for ourselves. What Are We Modelling? In reading through the comments, what struck me most wasn’t just the worry parents had about their kids. It was how many of us, as adults, still wrestle with the same things. People spoke about screen time, about addiction, about the temptation to check messages behind the wheel. And I couldn’t help but think: If we’re still learning to handle these too...

What the Minecraft Movie Teaches Us About Hype, Gaming, and Paying Attention

Last weekend, I took my boys to the cinema to see The Minecraft Movie . The place was packed—I've never seen so many children crammed into one screening. It felt a bit like a Ryanair flight. Every scene, no matter how small or oddly timed, was met with applause. Clapping for the sake of clapping. It was hard not to feel a little out of place. I’ve been playing Minecraft for over a decade. We even run our own family server at home. So this wasn’t a case of a confused parent trying to connect with their kids by tagging along to something they don’t understand. I introduced Minecraft to them. They play because I played. But the film? It wasn’t great. Some bits of action, a predictable arc, a sprinkling of mobs and visual effects… and that was about it. It felt like marketing in motion—something built more for buzz than substance. And judging by the viral clips flooding TikTok—popcorn flying, kids chanting “Chicken Jockey!” like it’s a sacred ritual, police being called into cinemas—...