As a Virtual Assistant, I’m trusted with access to a lot of client accounts, which means I see a wide range of passwords. Some are brilliantly strong. Others are surprisingly fragile.
Thankfully, I’ve yet to come across anyone still using 123456 or password1, but it’s not unusual to see passwords based on favourite colours, places, birthdays, pets or children’s names. If that sounds familiar, you’re not alone. Unfortunately, you’re also not secure. These are some of the most common and quickest to crack, passwords out there.
How Cybercriminals Really Crack Passwords
It’s not guesswork or luck. Attackers use methods such as:
- Common password lists: starting with the obvious choices
- Credential stuffing: using login details from one breached site to access another
- Social media clues: pets, kids, football teams, often with a number on the end
This is why unique passwords matter. One reused password can open several doors.
A Simple Fix: Three Random Words
The National Cyber Security Centre recommends using three random words.
Think: GiraffeEatingMeringues. Easy to remember, tough to crack.
You can still add capitals, numbers or symbols if you like, but length, randomness and uniqueness are what really count.
Add a Second Lock: 2-Step Verification and Passkeys
A strong password is a good start, but it isn’t the whole job. 2-step verification adds a second check when you log in, such as a code sent to your phone, so a stolen password on its own isn’t enough. Turn it on for your email and banking first.
Passkeys go a step further. They let you sign in using your device, fingerprint or face instead of a password, and more services are offering them all the time. If an account gives you the option, it’s worth taking.
Where to Strengthen Your Security First
Prioritise your strongest protection for:
- Your email: the gateway to everything else, because it can be used to reset all your other passwords
- Your password manager: and if you don’t have one, now’s the time
- Your online banking
- Honestly, every account that matters
The good news? You don’t need to keep changing passwords unless you think they’ve been breached. If you do suspect a breach, change your email password first, then work outwards.
Storing Passwords Safely
Yes, you can write them down, just not on a sticky note next to your screen or in a Word document called “Passwords”.
Better options include:
- Storing them offline somewhere safe
- Using a password manager/vault, so you only ever need to remember one main password
Sharing Access with a VA
If you work with a VA, there are better ways to share access than emailing a password. Many password managers let you share specific logins securely, and lots of platforms let you add your VA as a separate user with their own login. That way, you stay in control and can remove access in seconds if you ever need to.
Final Thought
If you’re handing over passwords to a VA, or anyone else, take a few minutes this week to review how strong they really are and whether 2-step verification is switched on. That small step could save you a lot of stress later.
If you’d like help getting organised, from setting up a secure password manager to making sure your business systems are safe to share, get in touch.