How to create strong passwords you can actually remember

Why your email password matters most

Your email is the key to your other accounts. If someone gets into it, they can reset the passwords for your banking, shopping and social media. That's why your email should have a strong password that you use nowhere else.

Steps

1. 1

   Pick three random words

   Choose words that aren't connected to each other or to you. Avoid names, birthdays, pet names and football teams. A memorable picture can help you remember them.

2. 2

   Add numbers or symbols if a site asks for them

   Some websites insist on these. Adding them to your three words is fine.

3. 3

   Use a different password for your email

   If you reuse a password and one website is hacked, criminals try it on other sites.

4. 4

   Turn on two-step verification

   This adds a second check, usually a code sent to your phone or an app, when someone signs in from a new device. Turn it on for your email first, then banking and shopping.

5. 5

   Consider a password manager

   A password manager remembers your passwords for you and can create strong ones. Most phones and browsers have one built in. You only need to remember one strong password to unlock it.

6. 6

   Update your most important accounts first

   Email, banking, online shopping and social media. You don't have to change everything in one go.

If this happens, try this

• If you've used the same password in lots of places

  Change it on your email first, then on your most important accounts.

• If a website tells you about a data breach

  Change that password, and any others where you used the same one.

• If you're worried you'll forget your passwords

  A password manager is safer than writing them down. If you do write them down, keep them at home, away from your devices.

Things to be careful about

• Never share a password or a verification code with anyone who contacts you, even if they say they're from your bank, a tech company or the police.

• Don't save passwords in a note on your phone that isn't protected.

• Make sure your account recovery details, such as a backup phone number and email, are up to date.