A Practical Guide to Safer Passwords and Sign-In

No password can guarantee that an account will never be compromised. Reduce risk by using a different, randomly generated password for every account, protecting account recovery, and enabling multi-factor authentication where available.

Use a Password Manager

Choose a manager by checking its current security documentation, supported devices, recovery process, export options, and privacy terms. Plan for recovery before storing your only copy of passwords in a new service.

1. Install the manager from its official site or verified app store.
2. Create a unique master passphrase and store recovery information securely.
3. Let the manager generate a separate password for each account.
4. Save recovery codes in a secure location separate from the account they recover.
5. Do not share your master password or one-time codes with support staff or anyone contacting you unexpectedly.

Plan features, pricing, and device limits change; compare them on the provider’s current site. See the AmanaTech resource directory for options to investigate.

Protect Important Accounts

• Enable a passkey or multi-factor authentication for email, financial, cloud, and administrator accounts when offered.
• Keep account recovery email and phone details current and protected.
• Prefer an authenticator app, passkey, or hardware security key when appropriate; use the provider’s current guidance.
• Never approve an unexpected sign-in prompt or share a one-time code.
• Use a trusted device and the official site or app when changing credentials.

If You Reused or Exposed a Password

From a trusted device, change the password on the affected account and any other account where it was reused. Start with email and financial accounts, review active sessions and recovery methods, and contact the provider or financial institution if you see activity you did not authorize.

Do not paste your actual password into a search engine, chat, email, or breach-check form. If you use a breach-notification service, read its privacy information and follow its official instructions.

Recognize Unsafe Examples

Password examples in articles, videos, screenshots, and tutorials are public. Never use an example password or a close variation as a real credential. A long phrase based on a familiar quote, name, date, or personal detail may still be guessable.

For help reviewing account-security basics, use the AmanaTech resource directory or contact us. Never send us passwords, recovery codes, or one-time sign-in codes.