An app that securely stores and fills in passwords, so you can use a strong, unique password for every account without memorizing them.
A password manager keeps your login details in an encrypted vault protected by one strong master password, and often by biometrics or multi-factor authentication. It can generate long random passwords, fill them into websites and apps, and warn you about reused or breached passwords. Many now store passkeys as well.
Password reuse is one of the main reasons accounts get taken over: when one site is breached, attackers try the same email and password elsewhere. With a password manager, each account has its own password, so one breach does not expose the rest. Business versions let teams share access to accounts such as social media profiles without sending passwords by email or chat. The master password and recovery settings must be protected carefully, since they guard everything in the vault.
An attack that uses usernames and passwords stolen from one breach to try logging in to many other websites automatically.
Multi-Factor AuthenticationA login method that requires two or more different types of proof of identity, such as a password plus a code from your phone.
PasskeyA passwordless sign-in credential based on FIDO2 and WebAuthn that uses a cryptographic key pair stored on your device instead of a password.
Passkeys replace passwords with phishing-resistant cryptography built into your devices. Here is how they work, how to start using them, and how businesses can roll them out.
Step-by-step recovery for a hacked Gmail, Outlook or Yahoo account, including the hidden forwarding rules hackers leave behind and how to secure linked accounts.
Which phone hacking signs are real and which are myths, plus a step-by-step cleanup checklist for iPhone and Android.