Good password habits

Weak or reused passwords are the most common reason business accounts get hacked. Strong, unique passwords are one simple step that makes your business much safer.

A good password

  • At least twelve characters. Length matters more than special characters.
  • Unique. Each password is used in only one place.
  • Random. No names, birth dates, place names or years.

Bad passwords are short (“abc123”, “password”), personal (“Kari1985”, “Mandal2024”), reused across several services, or written on a note next to the PC.

Passphrase: simple and strong

A passphrase is three or more random words strung together, for example “Fjord-Rainbow-Coffee2026!” or “Dog.Bicycle.OrangeJuice”. It's long, easy to remember and much harder to crack than a short, cryptic password like “P@ssw0rd”.

Use a password manager

A password manager stores your passwords and fills them in for you. You only need to remember one strong master password.

SolutionBest for
BitwardenIndividuals and businesses. The one we provide and recommend.
1PasswordBusinesses, good integration with Teams
KeeperBusinesses with compliance requirements

Here's how to get started:

  1. Install the app on your PC and phone, and the extension in your browser.
  2. Create an account with a strong master password.
  3. Save passwords in the manager as you sign in to services.
  4. Next time, the manager fills them in for you.

Get in touch for advice on a business solution.

Password rules at work

  • Never use your work password for personal services.
  • Never share passwords with colleagues. Use shared mailboxes instead, where each user signs in with their own account.
  • Change your password right away if you think it has been compromised.
  • Always use two-factor authentication as well. See Why two-factor authentication matters.

Forgot your Microsoft 365 password? See Reset your password yourself.

Was this page helpful?

Ready for simpler everyday IT?

Have a chat with us, and we'll work out how to make your everyday IT simpler. It costs nothing to ask.