Passwords are a foundational part of cybersecurity, but there’s still some background knowledge that can help you get the best use of them while also understanding their importance.

Authentication is the process of verifying your identity before a system lets you in. Every time you log into your email, your bank account, or your farm management software, that login screen is authentication at work. You provide your username and password, and the system checks whether they match what's on file.

Your username tells the system who you are. Your password confirms it. Without the right combination, access is denied.

Some systems go a step further and require an additional form of verification beyond your password, which is commonly called Multi-Factor Authentication (MFA) or 2-Factor Authentication (2FA). A common example of this is having a code sent to your phone or a push notification from an app. That's covered in the section on Multi-Factor Authentication. For now, the key point is that your password is often the primary barrier between your accounts and someone who shouldn't be in them.

Keeping track of a strong, unique password for every account you have isn't realistic without some help. That's where a password manager comes in. It's an app that securely stores all of your login credentials in one place, so you only have to remember one password instead of dozens.

That single password — called your master password — is what unlocks access to everything stored inside. It should be long, something you can actually remember, and not used anywhere else. A passphrase works well here: a string of several unrelated words, like HarvestMoonFencepost42. Write it down and keep it somewhere physically secure, like a locked filing cabinet. Most password managers have no way to recover it if it's lost, so treat it with the same care you'd give any important document.

Once you're set up, a password manager handles the things that make strong password habits hard to maintain on your own. It can generate strong, random passwords for new accounts, store your passwords securely, and fill them in automatically when you need them. If a password ever needs to be changed or updated, you make that change in one place and it's reflected everywhere. Most managers work across both your computer and your phone, so your credentials are available wherever you need them.

There's a bit of a learning curve to getting started, but the day-to-day use is straightforward once it's in place.

Most password managers work on both computers and phones or tablets, and it's worth setting it up on whichever devices you use to log into accounts.

On a computer, you'll typically install a browser extension that works alongside your internet browser like Chrome, Firefox, or Safari. When you visit a login page, the extension recognizes it and can fill in your credentials automatically. Most password manager websites walk you through the installation when you sign up and have documentation on how to use it. If you need to use your password manager for some of your applications/programs on your computer, you may want to download your password manager’s app directly to your computer. This app typically won’t need an internet connection to focus, and can autofill into other applications even if they aren’t in your original browser.

On a phone or tablet, you'll usually download the app from the App Store (iPhone or iPad) or the Google Play Store (Android). Search for the password manager by name, tap Install, and follow the setup steps. Once it's on your phone, it can fill in passwords automatically when you're logging into apps or websites on your device.

You don't have to set it up on every device at once. If you primarily manage accounts from your computer, start there. If your phone is where you do most of your logging in, start with that. The important thing is that you start small and continuously work towards migrating all your passwords into your password manager. Most tools have a sync ability which makes sure that your same password manager account can be used across multiple devices.

What Does a Strong Password Really Mean?

The two things that matter most are length and randomness. Longer passwords are harder to crack, and passwords without any recognizable pattern are harder to guess. Avoid anything personal, such as your name, your farm's name, a birthday, a favorite animal. Attackers can find or guess that kind of information more easily than you'd expect. Your password manager has a built-in generator that handles this for you, so you don't need to come up with anything yourself.

What's Wrong With Using the Same Password Everywhere?

When one account gets compromised, attackers will take those credentials and try them on other sites automatically. If you've reused that password, they don't need to do anything else to get into your email, your bank, or your farm management software. A unique password for every account keeps a single breach from becoming a much bigger problem.

Why Are Default Passwords Dangerous?

Some devices, like security cameras, sensors, equipment, and anything else that needs an internet connection to function, often ship with a generic default password, such as admin or 1234, already set. Those defaults are publicly documented and widely known, so attackers can easily find this information to log into your devices if they know what they’re doing. Thankfully, you can protect yourself by changing the password on any new device before you connect it to your network. Just make sure you save the new one in your password manager when you do.

How Do I Reset a Password?

Most login pages have a "Forgot Password" option that will send a reset link to your email. Follow the link, set a new strong password, and save it in your password manager before you close the window. If the site asks security questions for recovery, don't use real answers that could be looked up or guessed. Store whatever answers you choose in your manager alongside the login.

The following are trusted sources for additional guidance. We recommend starting here if you’re unsure where to begin looking up information

• CISA – Use Strong Passwords: https://www.cisa.gov/secure-our-world/use-strong-passwords
• National Cybersecurity Alliance – Password Managers: https://staysafeonline.org/resources/password-managers/