Reusing passwords is one of the most common ways small businesses get hacked. When one website is breached, attackers try the same email and password everywhere else, including your Microsoft 365 account.

Three habits that make a big difference

1. 1
   Use passphrases
   Four or more random words, like maple-kettle-orbit-canoe, are longer, stronger and easier to remember than P@ssw0rd1!.
2. 2
   Use a different password for every site
   It’s the only way to make sure one breach doesn’t unlock everything.
3. 3
   Let a password manager remember them
   A password manager creates and fills in strong passwords for you. You only need to remember one master passphrase.

Want to know if your email address has turned up in a known data breach? You can check for free at haveibeenpwned.com.