SB003 Uses a strong password or passphrase

Strong passwords/passphrases should be used for all accounts containing sensitive data, such as workplace accounts, payment-related sites, primary personal email and even social media accounts. Passwords that are over 12 characters long, don't contain personal information (e.g. names, birthdays and places) or are created by password managers and don't appear on haveibeenpwned password lists are the most secure options. You can also create a strong and memorable passphrase using the 'three random words technique' (e.g. LinguiniLONDONpen).