Protect Your Passwords from Hackers: Password Security Tips
Toggle Dark Mode
A strong password often serves as the first line of defense against unauthorized access to your device and accounts. It’s essential to ensure all passwords are robust and secure.
Weak passwords can be more easily guessed or cracked. Taking the time and effort today to set up strong passwords can prevent significant trouble down the road. Following these tips will give you confidence that you’re well-protected against potential threats.
How Quickly Can a Password Be Hacked
A 2023 bulletin posted by Oberlin College’s Center for Information Technology in Oberlin, Ohio, revealed just how easy it is for some passwords to be hacked. With the right technology, hackers are able to crack ostensibly strong passwords in a matter of minutes, if not instantly. As you can see from the above chart, a 7-character password containing numbers, symbols, and upper and lowercase letters can be cracked in about four seconds.
As you can see, the time required to crack longer and more complex passwords increases significantly depending on the number and mix of characters.
Note that those times are considerably longer on an iPhone, thanks to built-in delays between password attempts, but even a standard six-digit passcode can be hacked in an average of 11 hours.
Rules to Follow for Strong Passwords
In 2024, most security companies and online organizations recommend that all passwords be 12–16 characters and always use a combination of uppercase letters, lowercase letters, numbers, and symbols. Unfortunately, not all services allow the use of symbols. However, be sure to at least try to include a basic symbol like an exclamation mark or question mark if possible.
However, don’t just use numbers and symbols for simple letter substitutions. Hackers are wise to that approach, and the tools they use account for the fact that many folks use zeros for the letter “O” and exclamation marks to replace I’s and L’s. Some folks may think it’s clever, but a password like “H3!!0” is just as weak as the word “Hello.”
Beyond length and complexity, additional rules for strong passwords include:
- Variety: Avoid known words that can be found in a dictionary
- Non-sequential numbers: Randomize the order of numbers. Do not use sequential numbers like 1234.
- Unpredictability: Never include readily available personal information such as your street name and number, birthday, or the names of children or pets.
- Uniqueness: Use a different password for each account.
Use iPhone’s Built-in Password Manager
While iOS 18 will finally introduce a new, standalone Apple Passwords app, for now make sure you’re using iCloud Keychain or another password manager. These help you create and save strong passwords.
The best thing about iCloud Keychain is that it’s free, and any password you have stored there will automatically appear in Apple’s Passwords app when it arrives in iOS 18. With iCloud Keychain enabled, your iPhone will suggest a password for you when creating or updating a password in Safari or an app. Here’s how to make sure iCloud Keychain is enabled:
- Open the Settings app on your iPhone.
- Tap your name at the top, then tap to iCloud.
- Scroll down and make sure Passwords and Keychain is set to On.
Password Maintenance
Password maintenance is simple, and your iPhone helps with most of it. Here are three easy rules for maintaining your passwords:
- Periodically change your passwords. This is particularly important for sensitive accounts like banks and email.
- Enable Two-Factor Authentication (2FA) when possible. This requires a second form of verification, usually a code sent to your email or via text, in addition to your password.
- Check for compromised passwords. Your iPhone will notify you if any of your passwords have been leaked or otherwise compromised. to check, simply go to Settings > Passwords > and check Security Recommendations.
Most of us are guilty of having or reusing the same password across accounts for convenience. However, strong passwords are the foundation of our online security. With iCloud Keychain, Apple’s own password management app on the way, and third-party password management apps that securely store, sync, and audit your passwords, there are no excuses for weak passwords. Follow this simple guide to confidently create and manage your passwords.