Strong, long passwords !

[ss11943859]

I've changed my p.word for FireFox & added double authentication. Have more updating  to do & security changes.Just no safety out there any more ! Scan & update, everyone !

[fffred]

Excellent point, Sandee2!

For years I have used software password generators such as these below to generate random passwords...software like this allows me to vary the length and complexity of the password.

https://strongpasswordgenerator.com/

https://my.norton.com/extspa/idsafe?path=pwd-gen

test your passwords with this tool:   https://howsecureismypassword.net/

The paranoid might slightly alter their actual password before testing...who knows if that site keeps all data entered; maybe even use a vpn to access the site to anonymize yourself. In any event, enter some random samples and you'll get an idea of how secure a typical password might be.

An interesting article I ran across is this on password tips ...from a "penetration tester". Good insights in here.

https://blog.rapid7.com/2018/06/12/password-tips-from-a-pen-tester-common-patterns-exposed/

Some new browsers have a feature to "suggest" a password of similar complexity as these sites provide. I am old school and prefer to go to these sites as I have for years.

Also, some people use password managers (there is a thread here about them). Again I am old school and maintain a log in a large Excel workbook file...allows me to paste snapshots of information on the site, etc. can be useful. The Excel file is encrypted with the latest Microsoft functions (which are quite robust now; pre-Excel 2013 it was not very secure). And the drive the file is on is itself fully encrypted.   :- )

[fffred]

Two factor authentication on log-in is very strong (typically) as well.

My opinion is that a hardware key is best versus the authentication codes sent by email or text, or even with authentication code generator software (the hardware key is more secure than the email or text, and is more convenient than all of those code options).

I use Yubi key(s) for all my important sites that provide for them...investments, banking, etc (even Twitter and Facebook have option for hardware keys).