Weak Passwords: Stronger Everyday Password Habits

Note: This site may show light ads and occasional affiliate links. How that works.

Weak passwords are still one of the quietest ways accounts get taken over — not because attackers are clever, but because reused logins turn one breach into many.

I see it in homes and small shops alike: one leaked password from an old shopping site opens email, then banking, then the till admin. The fix is boring and it works — unique passwords where it matters, a manager that fits real life, and an extra phone check (multi-factor authentication, mfa) on the accounts that reset everything else.

Where households and micro-teams leak

• The same password on shopping, email, and the till admin
• A note on the fridge that outlives a housemate
• Browser-saved logins on a shared laptop
• A “temporary” password that became permanent

A practical stack

• Password manager for new and important logins
• Unique passwords for email, banking, accounting, and admin panels
• Mfa on email first — it resets everything else
• Share deliberately with the manager’s share features, not by text

When life changes

Someone moves out, leaves the business, or loses a phone: change the shared household or shop logins the same week. Recovery codes belong offline, not in the same inbox an attacker just opened.

A Saturday morning reset

Pick coffee, not crisis. Install or open a reputable password manager. Save the email login first, then banking, then the shop or work admin panel. Turn on mfa while you still have the phone in hand. Change any password you know you have reused — even if nothing bad has happened yet.

A self-check

Pick one account you care about — email or banking. Is the password something only you know, and long enough that guessing it would be hard? Have you turned on that extra phone check? If not, that is this week’s job. One account is enough to start.

Related: SMB checklist 2026 · NCSC password tips