Password Managers Explained: How They Work and How to Choose One
Reusing passwords is the most common way accounts get taken over. A password manager fixes that without making you remember anything new. Here's how they work.


Most account takeovers and scams rely on a handful of weaknesses: reused passwords, missing two-factor authentication, convincing fake messages and old software. This guide brings our security articles together, starting with the steps that protect you most.
Work through the first section this week. It takes less than an hour and blocks most common attacks.

Strong, unique passwords, a password manager and a second login step.
Reusing passwords is the most common way accounts get taken over. A password manager fixes that without making you remember anything new. Here's how they work.
A password alone is no longer enough. Here's how two-factor authentication works, which methods are strongest, and the order to secure your accounts in.
Passkeys let you sign in with your fingerprint, face or PIN instead of a password — and they can't be phished. Here's how they work and how to set one up.
How to recognise phishing and fake shops.
Phishing emails and texts are getting harder to tell apart from the real thing. These eight warning signs will help you catch them — and here's what to do if you've already clicked.
Backups that survive a lost phone or ransomware, and what to do if an account is hacked.
Phones get lost, laptops fail and accounts get locked. The 3-2-1 rule is an easy way to make sure your important files survive all three.