Tips for Password Security

Treat your password like your underwear: never share with anyone, not even family.

Never send by email, instant message or other means of unsecured communication. You never know who is watching or could intercept.

Always use a unique password for each account or service. Re-used passwords increase the likelihood of password theft and account takeover. 

Use a dedicated password manager. You only need to remember one password (to access the password manager) and the password manager can create, change and autofill strong passwords for you everywhere else.

Don't save passwords in web browser password managers. They store passwords for convenience not security and some have previously even stored passwords in plain text in a file on your computer!

Don't put them on sticky notes or keep them near the thing they're protecting

Enable Multi-Factor Authentication (MFA) everywhere possible. If you're not sure whether a service offers MFA, talk to Lineal; we may be able to add MFA support independently.

Consider passwordless logon methods, biometrics and hardware tokens instead.

If you have to complete security questions for an account, don't make the answers anything that can be guessed or retrieved from your social media profiles, especially if they're public.

If a password of yours is leaked in a breach, change it for the affected services immediately. If the password has been re-used (it isn't, is it?) then change it for every service the password has been used for.

Be wary of "shoulder surfers"; people standing nearby who may be able to see what you're typing.