Skip to main content Skip to local navigation
Information Security
Home » Week 1: Securing Your Accounts 

Week 1: Securing Your Accounts 

1. Password Hygiene: Building Strong Passwords & Passphrases

Your first line of defense is a strong, unique password. Avoid reusing passwords across accounts, and aim for 12-16 characters that include a mix of uppercase and lowercase letters, numbers, and symbols. For even stronger protection, consider using a passphrase (a string of four or more random words, numbers, and symbols) that’s at least 15 characters long. Steer clear of personal details like pet names or birthdays that could be easily guessed or found online.

2. Using Password Managers

Managing multiple complex passwords can be overwhelming and lead to password fatigue (the stress of remembering countless unique credentials). That's where password managers like 1Password come in. 1Password is York's chosen password management solution. It securely stores our credentials in an encrypted vault and generates strong, unique passwords tailored to each account. With 1Password, you only need to remember one master password to access everything. Unlike browser-based options, 1Password offers enhanced security features and can help you take ownership of your digital security.

3. Enable Multi-Factor Authentication (MFA)

Multi-factor authentication (MFA) adds an essential layer of protection by requiring a second form of verification, such as a code sent to your phone, a fingerprint scan, facial recognition, etc.. Even if someone manages to obtain your password, MFA helps keep your account locked down.
At York University, we use Duo 2FA to safeguard institutional systems and data. Duo helps verify your identity before granting access to York's online services, reducing the risk of unauthorized logins. You can bring that same level of protection to your personal life by enabling MFA on your email, banking, and social media accounts. Enabling MFA is quick and supported across most platforms, and the protection it offers is long-lasting.

Test Your Account Security - Take the Get Cyber Safe Checkup Quiz!

Visit https://www.getcybersafe.gc.ca/en/resources/research/take-get-cyber-safe-checkup to take the short quiz developed by the Government of Canada to get a better idea of your account security.