If you’re still using the same password you made up years ago, this is your sign that it’s time for an upgrade. In today’s digital age, we’re responsible for more password-protected accounts than we’d like to be, which makes it easy to take shortcuts. But those shortcuts have consequences — namely, putting your data at risk.
The good news is that strong password habits are easier to build than you might think, especially with the right approach and the right tools.
🎣 How Passwords Actually Get Compromised
Most account compromises don’t happen like they do in the movies. Hackers rarely sit at a keyboard guessing your login one attempt at a time. Instead, they rely on automated tools to test millions of password combinations in seconds, stolen data from website breaches to try the same credentials on your other account, and, of course, phishing attacks designed to trick you into handing over your password directly.
What this means in practice is that a password that’s short, simple, or shared across multiple accounts is far more vulnerable than it might seem.
Want to avoid getting phished? Check out Don't Take the Bait: How to Spot a Phishing Scam.
🔐 Long Passwords are Strong Passwords
A longer password takes longer to crack, which is why Pitt Digital requires a 15-character minimum for your University account password.
If 15 characters sounds like a lot, try thinking in passphrases rather than passwords. A passphrase is a string of random words, like “MyPassw0rd!IsBetterThanYours7.” This makes it much harder to crack than a shorter, complex password, but far easier to remember.
A strong passphrase also needs to be unique to each account. If you use the same login in multiple places, a breach at one service can expose all of them. This is exactly where a password manager can help.
🗝️ The Case for a Password Manager
A password manager is an application that securely stores all of your login credentials in one place, protected by a single master password. Instead of trying to remember a unique 20-character passphrase for every account you have, you only need to remember one.
Most password managers also generate strong passwords for you automatically, fill them in when you log in across devices, and alert you when a saved credential shows up in a known data breach. There are plenty of reputable options available, and many offer free tiers. A quick web search will help you find the right option for you.
🔑 Looking Ahead: Passkeys
Passwords have been the login standard for decades, but a more secure alternative is quickly gaining ground. Instead of typing a password, passkeys authenticate you using your device's biometrics — like your fingerprint or face — or a PIN. The underlying technology ties the login directly to your device and the specific site or app you're accessing, which means passkeys can’t be phished or stolen in a breach the way passwords can.
Passkeys are part of where the broader security landscape is heading. And Pitt intends to be part of that shift. Major platforms including Apple, Google, and Microsoft already support passkeys, and more websites and services are adopting them every day. You may have already seen an option to “sign in with a passkey” without realizing what it was.
✅ Habits Worth Starting Today
For now, strengthening your password habits is the right move — and one that will serve you well no matter what comes next. To make your digital security even stronger, try out a few of our top tips:
- Switch to passphrases. A longer string of words beats a shorter, complicated password every time.
- Use a password manager to generate and store unique credentials for every account.
- Never reuse passwords — especially for accounts that have access to sensitive data.
- Keep your Duo Mobile app up-to-date to protect your Pitt account.
- Look for the passkey option on services that offer it. It’s often the most secure login method available.
Your passwords are often the first thing standing between your account and someone who wants access to it. A little investment in stronger habits — and the tools that support them — makes a real difference.
— Pitt Digital
