Ravindra BagaleCourses & study guides Track your progress

Guides Cyber safety for everyone

Strong Password Rules for Everyday People

By , Cyber Security trainer LinkedIn Published: Last updated:

A strong password is long, unique to each important site, and not based on your name, birthday or “Password123”. Prefer a passphrase of several random words, or a password manager. Never reuse your email password on shopping or social apps.

Quick steps

  1. Make email and banking passwords long and unique first.
  2. Use a passphrase of 4+ unrelated words or a manager-generated password.
  3. Do not reuse those on social or shopping sites.
  4. Turn on 2FA so a stolen password is not enough.
  5. Change passwords after any breach notice or reuse scare.

Why this matters

Tom in Leeds reused one short password everywhere. When a shopping site was breached, thieves tried the same password on his email. Aisha in Lucknow switched to long passphrases and stopped reusing.

Length and uniqueness beat clever substitutions like “P@ssw0rd”.

What you need to know

Good pattern: long passphrase or manager-generated string. Bad pattern: name+year, keyboard walks, reuse across banks and social.

Password habits

  • Unique password for email — Essential
  • Same password on five shops — Risky
  • Written in a public sticky note at work — Risky

How to do it (step by step)

  1. Make email and banking passwords long and unique first.
  2. Use a passphrase of 4+ unrelated words or a manager-generated password.
  3. Do not reuse those on social or shopping sites.
  4. Turn on 2FA so a stolen password is not enough.
  5. Change passwords after any breach notice or reuse scare.
  6. Teach family: longer is better than fancy symbols alone.

Example: Aisha builds a passphrase

Aisha chose four random words she could picture, separated them, and saved them in a notebook at home — not in chat.

She set a different manager-generated password for shopping.

Tom finally changed email after a Have I Been Pwned hit showed reuse risk.

Common mistakes

  • Reusing email password on other sites.
  • Sharing passwords in WhatsApp groups.
  • Thinking a short complex password beats a long simple passphrase.

Trusted places to check

Quick revision

  • Long + unique for email/bank.
  • No reuse.
  • Add 2FA.

Ravindra Bagale's Tip

Length beats clever substitutions. Four random words beat P@ssw0rd1.

Quick quiz: check what you learned

  1. What matters most for everyday password safety?

    1. Long unique passwords (or passphrases) plus no reuse
    2. Using your birthday with one symbol at the end
    3. Saving one short password for every website you use
    4. Texting passwords to yourself in a family group chat
    Show answer

    A. Length and uniqueness matter most.

  2. Which account should get a unique password first?

    1. Email — because it resets almost every other login
    2. A throwaway forum you rarely open each year
    3. A public Wi‑Fi captive portal used once
    4. A shared TV app profile at a friend’s house
    Show answer

    A. Email is the master key.

Learn more on this site

Short path above. These pages go deeper:

Frequently asked questions

What is this guide about?

It explains everyday safety for: strong passwords, unique passwords, passphrase. Plain steps, no IT jargon required.

What is the one rule to remember?

Use a long unique passphrase per important site, or a password manager. Never reuse bank/email passwords.

Do I need to be a cyber expert?

No. These steps are for parents, students, shoppers and anyone who uses a phone.

Where do I report if something already went wrong?

India: 1930 and cybercrime.gov.in. US: reportfraud.ftc.gov. UK: Action Fraud. Also tell your bank or the platform quickly.