The username and password you came up with when you were 13 may be fun, and you may have a strong, emotional attachment to them—but if you’re still using them in the workplace, it’s probably time to come up with new ones.

Experts recommend changing your username and passwords regularly and using different ones for each website you log in to. This can help reduce your risk of being hacked or being a victim of fraud, as cybercriminals often exploit weak or reused usernames and passwords.

So, what makes a good username and password? Let’s go over it.

Password Hygiene and Strong Passwords

Changing your password regularly and practicing safe habits is called password hygiene, and it’s as essential to your financial health as regular hygiene is to your physical health.

To practice good password hygiene, you should never:

• Reuse passwords
• Share passwords
• Store passwords in unsecure locations
• Use simple or predictable passwords

Instead, you should aim for long—12 characters or more—complex passwords that avoid personal information, sequential numbers, or common dictionary terms.

Using a unique password for each site can be a lot to keep up with. We recommend using a trusted password manager to help you keep track. Often, your web browser or phone will remember your passwords and store them in a secure password manager, but you can use a paid service as well. And remember, treat your password like a toothbrush—don’t share it, and swap it for a new one regularly.

Username Complexity

Usernames are often the first piece of information a fraudster needs to break into your accounts. So, ensuring your username is complex and difficult to guess can make it harder for bad actors to break into your accounts.

In general, avoid including these items in your usernames:

• Full names
• Birth years
• Business names
• Email addresses when possible

Focus on creating usernames that are longer and harder to guess—this can be as simple as an inside joke or a nickname, or a complex combination of letters, words, or numbers.

Tips for Reducing Fraud

If your accounts offer it, turn on alerts for attempted log ins and use multi-factor authentication, especially for your financial accounts.

If someone tries to log in to your account, immediately change your username and password. You’ll also want to immediately change them on any sites that reuse either the username or password.

And, as always, remember to review your accounts regularly to check for unusual activity.

These simple security steps can help reduce your risk of fraud and protect your accounts and personal information—whether you’re banking, shopping online, or sharing memories on social media.

Stay one step ahead of fraud. Visit our Security Center for more tips and resources to help keep your accounts and personal information secure.