Why does the password matter so much? #
Most hacks need no special skill: attackers automatically try common passwords, or use your password leaked from another site. Read how a brute force attack works.
What makes a password strong? #
| Weak | Strong |
|---|---|
| Short: Ahmed2024 | Long: 15 characters or more |
| A single dictionary word | A phrase of 4 unrelated words, or a random string |
| Contains your name, company or a date | No personal information |
| Same password on many accounts | A different password for every account |
A password manager: the practical answer #
Nobody can remember dozens of long, different passwords. A password manager generates a strong password for each account, stores it encrypted and fills it in when you log in. You only need to remember one password: the manager’s own.
- Choose a trusted manager: Such as Bitwarden, 1Password or KeePass, or the one built into your browser.
- Create a strong master password: A long phrase you remember well and use nowhere else.
- Turn on two-factor authentication for the manager: So nobody can open your password vault.
- Start with important accounts: Email, cPanel, WordPress, the client area and bank accounts.
- Replace reused passwords: Any password you used in more than one place, replace with a new generated one.
Add a second layer: two-factor authentication #
Even the strongest password can leak. Two-factor authentication asks for a code from your phone at login, so the password alone is not enough. Turn it on in cPanel, the client area and WordPress.
How Hyyat Host protects your site #
- cPHulk and CSF block addresses that repeat failed logins on cPanel, email and WordPress.
- Two-factor authentication is available in the client area and in cPanel.
- Imunify360 detects automated guessing and stops it.
Frequently asked questions #
How long should a password be?
At least 15 characters for important accounts. Length matters more than complex symbols, so a long phrase beats a short password full of symbols.
Is saving passwords in the browser safe?
It is better than reusing passwords. Protect your device with a password, and never save passwords on a shared device.
How often should I change my password?
There is no need to change a strong, unique password on a schedule. Change it right away if you suspect a leak.
