Move to unique passwords
Want more background?
The idea in everyday life
Let a password manager generate and store long, unique passwords. Protect the manager itself with a strong unique master password and best available MFA. Change reused credentials beginning with critical accounts and known breaches.
A password manager is a key ring: one protected vault lets every door use a different strong key.
One step at a time.
Use the sample or information you have permission to use. Keep your work as you go. You can pause between steps.
- 1
Choose a reputable password manager. Protect it with a long, unique master passphrase—a password made from several words.
- 2
Import or add accounts, then change reused passwords starting with the critical-account map.
- 3
Let the manager generate long random passwords and save the new credential before closing the reset flow.
- 4
Store the recovery kit securely offline and never place the master password inside the unlocked vault alone.
See how it works.
Sam imports a browser list, removes duplicates carefully, changes primary email and financial passwords to generated values, and records only recovery codes—not passwords—on an offline emergency sheet. Reuse falls from 31 accounts to zero over two sessions.
Did you cover these?
- Critical passwords are long, random, and unique.
- The password-manager master credential is not reused or casually stored.
- Emergency access is documented without creating an exposed plain-text password list.
What to finish
A password vault with unique credentials for every critical account and a secure recovery kit.
Watch for this
Changing many passwords quickly without confirming that each new credential and recovery method works.
How can I tell I understand it?
No two critical accounts share a password and you can recover the vault if a device disappears.
Quick knowledge check
Answer all 3 questions. Get at least 2 right and the lesson completes automatically.
You’ll get an explanation for each answer. Signed in? Your results save to your account.
Pass the check. We’ll save the progress.
Answer all 3 questions above and get at least 2 right. You can review the explanations and try again.
Go to the knowledge checkOptional course overview video · same video as Lesson 1
Secure Our World
From Cybersecurity and Infrastructure Security Agency. Watch here or open it on YouTube .
When CISA recommends strong passwords and a manager, perform the change on one critical account while confirming the new login before deleting old access.Tools, templates, and lesson sources
Tools and templates
Tools open in a new tab so you can keep your place here.
Sources and further reading
Explore the references behind this lesson.
Report a problem with this lesson
Tell us what went wrong. Please leave out personal information and private project contents.