As a Virtual Assistant, I’m trusted with access to a lot of client accounts – which means I see a wide range of passwords. Some are brilliantly strong… but others are surprisingly fragile.
Thankfully, I’ve yet to come across anyone still using 123456 or password1, but it’s not unusual to see passwords based on favourite colours, places, birthdays, pets or children’s names. If that sounds familiar, you’re not alone – but unfortunately, you’re also not secure. These are some of the most common, and quickest to crack, passwords out there.
How Cybercriminals Really Crack Passwords
It’s not guesswork or luck. Attackers use methods such as:
-
Common password lists – starting with the obvious choices
-
Credential stuffing – using login details from one breached site to access another
-
Social media clues – pets, kids, football teams, often with a number on the end
This is why unique passwords matter.
A Simple Fix: Three Random Words
The Cyber Resilience Centre recommends using three random words.
Think: GiraffeEatingMeringues. Easy to remember, tough to crack.
You can still add capitals, numbers or symbols if you like, but randomness and uniqueness are the real key.
Where to Strengthen Your Passwords First
Prioritise your strongest protection for:
-
Your email – the gateway to everything else
-
Your password manager – and if you don’t have one, now’s the time
-
Your online banking
-
Honestly… every account that matters
The good news? You don’t need to keep changing them unless you think they’ve been breached.
Storing Passwords Safely
Yes, you can write them down – just not on a sticky note next to your screen or in a Word document called “Passwords”!
Better options include:
-
Storing them offline somewhere safe
-
Using a password vault so you only ever need to remember one main password
Final Thought
If you’re handing over passwords to a VA (or anyone else), take a few minutes this week to review how strong they really are. That small step could save you a lot of stress later.
If you’d like help getting organised – from setting up a secure password manager to making sure your business systems are safe to share – get in touch with me

