Protecting Passwords

Getting “pwned” means that your password has been exposed by a data breach. A website called haveibeenpwned is a free source for determining whether your accounts have been pwned. 

Avoid being pwned by: 1) being alert to phishing scams and spam; 2) using caution when opening files; 3) avoiding malicious links; 4) enabling two-factor authentication; 5) using strong passwords;  and 6) installing a password manager. 

If you have been pwned: 1) make sure your antivirus programs and operating systems are up to date; 2) scan your device for malware; 3) change your passwords; 4) change security questions; and 5) check the settings of your email accounts to assure that they haven't been set to automatically forward messages. 

For more tips, read articles about avoiding phoshing scams, backing up passwords, security, protecting data, receiving pwned alerts and steps to take if you've been pwned. Also see the ABA’s Cybersecurity Handbook and the New York Times review of Best Password Managers.