While you only need one key to lock your apartment door, the digital world is far more complicated. People often have dozens of accounts online – and just as many passwords to protect them with. Since building a password that is equal parts unique and secure can be frustrating, we have prepared some ideas and suggestions for strong passwords to keep you one step ahead of hackers.

What is a good password?

You might think that the answer to this question would be very subjective, but that’s far from the case. In simplest terms, a good password is one that’s difficult to crack. The stronger your password is, the better it works to protect your accounts from hackers and other malicious actors. A strong, reliable password can sometimes take millions of years to crack, which means that the hackers are less likely to even try to gain them.

When you’re thinking of good password ideas, you need to keep the following criteria in mind:

• The password should be at least 12-15 characters long.

• It should use a combination of letters, numbers, and special characters. Spaces are also allowed.

• It should not be a common word, product, character, name, or anything you can easily find in a dictionary.

• It should be a combination that only you know and others could not easily predict. We’ll cover some creative password ideas shortly.

• Each password should be unique and you shouldn’t reuse them for several accounts. If a password you use on several platforms is cracked, that puts all of your accounts at risk.

What is considered a weak password?

Weak passwords consist of sequential letters or numbers, are fewer than eight characters long, or use common words and phrases. The most popular passwords are well-known by malicious actors and are usually what they try first.

According to NordPass’ annual top 200 most common passwords list, “123456” and “password” are the most commonly used and vulnerable passwords. Another example of a weak password would be using the name of a fictional character like “Superman,” “Batman,” or “Joker.”

Examples of bad passwords

Here are some more examples of weak, easy-to-crack passwords:

• 123456789

• abc123

• qwerty

• iloveyou

• hello

• computer

• password123

If you’re wondering whether your passwords might be weak links, check out the list of the top 200 most common passwords. You’ll find even more examples, as well as some fun facts about the most common passwords around the world.

The most common password-cracking techniques

Brute-force attack

During a brute-force attack, a malicious actor uses software that tries every possible combination to find the right one. An eight-character password consisting of upper- and lowercase letters, numbers, and special characters can be cracked in just two hours. Good passwords will take months or even years to break through, depending on their uniqueness and complexity.

Dictionary attack

While brute-force attacks try various combinations of special characters, numbers, and letters, a dictionary attack uses a program that goes through a prearranged list of words. Essentially, if your password can be found in a dictionary, specialized software can easily crack it.

Phishing

Phishing is a social engineering method to trick people into revealing their credentials. Phishing attacks often use email services as a medium: hackers send emails pretending to be reputable sources and refer users to fake login pages. A user then inputs their login credentials themselves and inadvertently grants this information to the hackers.

Credential stuffing

Credential stuffing is a popular method for hackers to gain access by collecting usernames and passwords used in previous attacks and trying them on other platforms. This method often proves successful because people tend to reuse the same password for all their accounts.

Keylogging

Keylogging involves a specific type of malware, known as keylogger, infecting the victim’s device. The keylogger can then track the user’s keystrokes and device activity, depending on the software and the device. This can include copied and pasted data, phone calls, location, and screenshots. Using this information, hackers can easily access passwords and other sensitive information, allowing them to launch further attacks on the individual or data from their place of work.

How to create a strong password

• The longer your password is, the better. Many websites ask you to create eight-character passwords, but we recommend going for at least 15 characters.

• Avoid ties to your personal information, such as your name, surname, address, or date of birth.

• Use a combination of numbers, symbols, and upper- and lowercase letters in random order.

• Don’t use sequential letters and numbers.

• Avoid substitution: “kangaroo” and “k@ng@r00” are both equally weak passwords, and a brute-force attack can easily crack them.

• Don’t reuse the same password for multiple accounts.

With our free password security tool, you can check your password strength and if it has been exposed in any data breaches. You can also try the Password Health feature with NordPass Premium. It scans all passwords that you’ve saved in your Vault and checks for vulnerabilities.

Top 5 strong password ideas

Coming up with a strong and unique password can be a challenge. To make this process easier for you, we’ve gathered some examples that will help protect your data and accounts from being breached and taken over. We’ve also included some formulas and passphrase examples that you can try yourself. However, we highly recommend you don’t use the example passwords for your accounts.

1. Shorten each word

Think of a phrase and remove the first three letters of each word (in some cases, that might mean deleting full words, but that’s fine):

“Laptop running free in the jungle” -> “top ning e gle”

Sounds like gibberish? That’s exactly what we want. Just don’t forget to add special characters and numbers to make it more complicated. It would take 94,000 years to crack this password.

2. Create your own formula

Create a formula that will help you remember the password. For example, you can take a phrase and replace every letter with the next one in the alphabet:

“Cucumbers are tasty” -> “dvdvncfst bsf ubtuz”

Another clever way of creating strong passwords is to turn song lyrics into acronyms. This means using only the first letter of each line of your favorite song.

So, “Shine on you crazy diamond” by Pink Floyd becomes “rsnsybccystswrcc.”

The time needed to crack this password is 746 million years.

3. Play with the vowels

This one is much easier to implement and memorize: take a random nonsensical phrase and replace one vowel with another (for example, “a” with “e”):

“A car is floating in a pan” -> “e cer is floeting in e pen”

Don’t forget – spaces are allowed in passwords, and we highly encourage you to use them. The combination of having spaces and switching the vowels around means the above password would take 583 million trillion years to crack.

4. Mix the codes of your favorite countries

This one is quite fun and easy to memorize. You will always generate good passwords with this method. Simply make a list of the ISO codes of your favorite countries and put them together:

“Mexico, Ireland, France, Germany, Japan” -> “mex irl fra deu jpn”

You wouldn’t think so, but a hacker would require a staggering six thousand trillion years to crack this password!

If you want to spice things up and make them even more difficult to crack, you can also add each country’s calling code:

“mex54 irl353 fra33 deu49 jpn81”

Such a password would take 12 decillion years years to crack. How impressive is that?

5. Use a password manager

If creating and remembering random phrases for all your accounts seems too complicated, you can use a password manager, such as NordPass. It’s an easy-to-use app that lets you generate strong, unique passwords and securely store them in an encrypted Vault. You can also easily use NordPass to autofill online forms and fields.

You can add as many passwords as you need and access them from any device. This way, you can get the best of both worlds by combining your creative password ideas with one-of-a-kind secure ones created by the password manager for each account without the risk of forgetting them. You can use a special code and get an additional month of NordPass Premium for free when you purchase a two-year plan.

Additional tips

Here are some more tips to keep in mind when you’re looking for good password ideas:

• In order to protect your data, remember that passwords must be difficult to predict. Including special characters and spaces increases the time it takes for your password to be cracked.

• Take your phone security into consideration. According to research, pattern locks are successfully replicated around 64% of the time. Instead, set up a PIN or use our guide to generate some strong phone password ideas.

• Don’t forget to implement new password ideas for work. Don’t reuse your personal passwords because if they ever get breached, your work accounts could be in danger, too.

• Always use multi-factor authentication (MFA). Even if your password is definitively strong, accidents can happen and your first line of defense might be breached. Using MFA means that no one can access your accounts without accessing your authentication device. NordPass uses multi-factor authentication to add an additional layer of security to your password vault.

Reading about the cloud in 2023 has an almost nostalgic feeling to it, a bit like watching that HBO special for the 20th anniversary of the Harry Potter series. You suddenly realize how long it’s been since the whole conversation about cloud computing started.

The cloud has become such a common IT tool that today it is difficult to find an industry (or even a company) that does not use it to some extent. The chances are very high that you yourself are using it frequently.

So, we will not waste your time with generic information explaining the benefits and challenges of the cloud. Instead, we’ll get down to the nitty-gritty and discuss what’s really important — cloud data security.

First things first: What is cloud security?

Cloud data security could be explained as what organizations do to protect their cloud-based systems and applications — and the data they store in the cloud — against cyber threats.

You could also say that it is a set of strategies, procedures, and tools that, when properly applied, can help companies prevent unwanted data exposure or IT infrastructure damage caused by various internal or external factors.

Both explanations are correct. In fact, they complement each other and together provide more context — although they don’t give the whole picture.

Treating it more like a concept, we could say that cloud security is a complex and constantly evolving field in IT that requires attention from all organizations that have either fully or partially based their IT environment on the cloud. So, with that in mind, the question you may be asking yourself right now is…

Why is cloud security so important?

If we had to answer that in one sentence, it would probably be this: cloud security plays an essential role in ensuring the confidentiality, integrity, and availability of sensitive data stored in the cloud. But this only scratches the surface. So, allow us to elaborate a bit because there’s more to this matter than meets the eye.

Each year, more and more organizations start their digital transformation journeys and integrate cloud-based tools and services into their IT infrastructures. All of those companies — no matter if they are small businesses or large-scale enterprises — cannot afford to take any risks regarding the security of their digital assets.

This is why cloud security is one of the aspects that these companies must address if they decide to run even a tiny part of their activities in the cloud — or to keep their data inside one. If they don’t, they risk not only data loss or disruption of their business operations but also financial and reputational damage. They must be aware of the fact that keeping digital assets in the cloud doesn’t mean that they are unreachable to hackers.

This is to say that organizations should make every effort to ensure that their cloud cybersecurity is at the highest level at all times — after all, the success of their business endeavors depends on that.

Main risks associated with cloud security

Security issues in cloud computing often revolve around the potential for unauthorized access — but not only that. Below, you will find descriptions of some of the biggest threats that today’s companies must be aware of while developing their cloud security strategy. Whether a company will be able to address and manage these threats depends not only on the actions they take but also on its awareness of the emerging trends and disruptive forces shaping its industry.

• Data breaches:

  Whenever an organization starts storing sensitive information in the cloud, it instantly becomes a target for cybercriminals — and they will try to find their way in. A successful breach could result in the exposure of the company’s confidential data including its financial records, customers’ personal information, or even intellectual property.

  In its “Cost of a data breach” report, IBM reveals that the global average cost of a data breach across all sectors in 2023 is almost $4.5 million — which is an amount that has increased by almost 15% over the last three years. This fact alone shows that companies cannot waste time, and they should introduce robust authentication mechanisms, encryption protocols, and access controls as soon as possible to protect themselves against this threat.

• Insider threats and privilege abuse:

  It should be no surprise to anyone that employees with access to company data sometimes misuse their privileges or can be coerced into revealing sensitive information. This can lead to similar or even the same issues that arise due to data breaches.

  Hackers will use every vulnerability in security controls or protocols to gain unauthorized access to your systems and applications — and that is why companies must work on developing sound cybersecurity policies that, first, their employees will adhere to, and second, will help them mitigate the damage if one of their employees (whether intentionally or not) causes a potential cybersecurity threat.

• Insufficient compliance with legal requirements:

  Cloud service providers often operate on a global scale, helping customers from different parts of the world where different sets of data protection laws and regulations apply. It’s no rocket science to point out that complying with these diverse legal requirements can be a challenge for both cloud providers and their customers.

  Non-compliance with the standards may lead to serious financial or reputational losses. Thus, businesses must carefully navigate the regulatory landscape and choose cloud providers that meet the relevant criteria.

Best practices in cloud security

Before we discuss any cloud security best practices, we would like to point out that cloud security as a whole is a continuous process and, therefore, you should stay informed about the latest security trends and practices so that you can protect your cloud environment more effectively. In other words, do not think of the following examples as the only elements you should pay attention to when creating a cloud security strategy. Instead, treat them as a starting point.

1. Encrypt your data: One of the foundational pillars of cloud security is encryption, which is the process of using combinations of sophisticated algorithms to make sure that no unauthorized party can access your data — whether at rest or in transit. Some cloud service providers offer built-in encryption features, which you can leverage to keep your data secure at all times. If they are not available to you from the get-go, consider using third-party encryption tools to protect your sensitive information.

2. Implement and use identity and access management (IAM) tools: To manage user access and permissions effectively, you must implement a strong IAM strategy. For example, by following the principle of least privilege, you can ensure that only authorized users with specific roles can access your systems, applications, and data. In other words, you can use IAM tools to provide the right people with access to the right resources — and only them. This will help you protect sensitive information from being compromised.

3. Carry out audits regularly and monitor all cloud activities: You can stay ahead of potential security risks if you conduct frequent security audits. That way, you will be able to identify cybersecurity areas that require improvement and take necessary measures to address them before any security breach occurs. If you pay close attention to what’s going on in your network, you’ll be able to detect and respond to any anomalies or potential threats before they cause damage.

4. Find out what your provider does to ensure cloud security: When teaming up with a cloud service provider, you should take the time to understand their shared responsibility model and all the security features they offer. In other words, you should get familiar with your provider’s security practices and security to, first, double-check if their approach aligns with your organization’s specific security requirements, and second, to ensure that your sensitive data and applications are adequately protected in the cloud environment.

5. Backup your data: You can enhance your organization’s cybersecurity by consistently backing up your business data in a highly secure location and rigorously testing the recovery process. If you take this proactive approach, you will be able to, in the unfortunate event of a security breach or data loss, quickly and seamlessly restore crucial data and applications. Not to mention that it will help you minimize downtime, safeguard your reputation, and ensure business continuity.

How does NordLocker fit into the context of cloud security?

To adequately answer this question, we need to start with a brief explanation of what NordLocker is, namely an end-to-end encrypted cloud storage platform that allows you to securely store, manage, and share your business data with company members and partners.

NordLocker was designed to help companies — no matter the size, location, and nature of their business — protect their digital assets in a highly secure, state-of-the-art cloud environment to which only they have access. Therefore, it is more than fair to say that NordLocker was created with cloud security in mind.

Thanks to its wide range of features — from end-to-end encryption, through multi-factor authentication (MFA), to zero-knowledge architecture (and everything in between) — NordLocker covers all the cybersecurity practices we discussed in this article to help its users create a much safer online business environment. It can help you do that as well.

That’s why we encourage you to go to NordLocker and learn more about the platform and get a 14-day free trial. That way, you will be able to see for yourself if NordLocker is the right fit for your business and if what we’re saying is true.

Enjoy the ride!

Ever been in that awful situation where you’re going through old emails or disorganized folders trying to find that one crucial document? The insurance form, an e-copy of your ID, or even a video detailing how to get into your new office? Wouldn’t it be a game-changer if you had all your important files right next to your passwords, credit card information, or secure notes?

Good news! Today, we are excited to introduce File Attachments — a new and improved way to manage important files with NordPass.

Best for large file attachments

Here’s a quick rundown of how it works. As a NordPass Premium user, you now have the ability to attach files to your saved items in NordPass. It’s not just about enhancing organization. This feature also provides an unmatched level of security. Forget the hassle of disorganized unsafe file storage. Any attached files or documents will be as secure as your passwords thanks to our encrypted storage.

But we didn’t stop at mere functionality. NordPass Premium now provides a whopping 3GB of encrypted storage per account, a giant leap forward. That’s not just more — it’s three times more than any other password manager out there! We’re offering you unrivaled storage and advanced security — and that’s certainly what we call more bang for your buck!

No strings attached (except your files)

With NordPass Premium’s File Attachments, you have the freedom to store documents of any type to one of your existing items. Whether it’s a simple JPEG, PDF, MP4, or DOC file — NordPass supports them all.

The new feature allows for files up to 50MB in size and up to 50 attachments per single item. The only limit is your 3GB storage per user — and that’s a whole lot of space for your files.

While we aim at maximizing convenience, your security is always our top priority. To ensure maximum protection, we currently do not support attaching files to shared items or sharing items with files attached.

You can learn more about how to attach files to your NordPass items in our handy help center article.

Streamline your digital life with NordPass

In the digital age, we often juggle tons of files, documents, and data, and that can lead to a disorganized and chaotic personal digital space. With our new File Attachments feature, we look to help you take back control and streamline your digital life by allowing you to save documents in a quick and efficient way

With NordPass Premium, you can now attach important files to all your saved items. Store any file in one secure place with 3GB encrypted storage.

Instant access

When you’re in a hurry, having quick access to your important documents can make all the difference. That’s where File Attachments shine. Need to view a copy of your ID or an important receipt? No problem! With File Attachments, all your vital images or documents are just a few clicks away.

Effortless downloads

It’s not just about attaching and storing your files along with your passwords. It’s also about being able to retrieve them whenever necessary. Suppose you’ve stored financial documents that you need to share with your spouse. With File Attachments, you can quickly and effortlessly download these files directly from NordPass.

Unprecedented control

The File Attachments feature isn’t just about adding another functionality to NordPass. It’s about giving you greater control over your digital life. You get to decide what files to attach, what items those files are attached to, and when to download or delete them. You can also organize your vault in a way that best suits your personal or professional needs.

A single secure place for files and passwords

Take your password manager experience to the next level with NordPass Premium. Don’t just manage your passwords, manage your life. No more scrambling for documents, no more disorganized files, and certainly no more compromised security.

Your life. Your files. One secure place. Start your NordPass Premium journey today and make the most of our File Attachments feature.