The 5 rules to remember

The whole guide fits into five sentences.


If you remember only five things from this guide, remember these.

  1. A different password for every account.
  2. Use a password manager.
  3. Turn on two-factor authentication (2FA) wherever possible.
  4. Give special protection to your email address and your Apple account.
  5. Never give out a password or a login code received by SMS or generated by an app.

Why?

Because if you use the same password everywhere and a single site is breached, an attacker can try that same password on Instagram, Amazon, your mailbox, and so on.

Cybermalveillance.gouv.fr explicitly recommends a different password for each service, a password manager, and two-factor authentication.

Every recommendation links back to official documentation.