{"id":136,"date":"2026-02-24T11:55:49","date_gmt":"2026-02-24T11:55:49","guid":{"rendered":"https:\/\/clients-dev.transformhousing.org.uk\/?post_type=client-blog&#038;p=136"},"modified":"2026-03-13T14:39:09","modified_gmt":"2026-03-13T14:39:09","slug":"creating-strong-passwords-and-avoiding-scams","status":"publish","type":"client-blog","link":"https:\/\/clients-dev.transformhousing.org.uk\/?client-blog=creating-strong-passwords-and-avoiding-scams","title":{"rendered":"Creating strong passwords and avoiding scams"},"content":{"rendered":"\n<p>Nowadays, we need passwords for lots of things, like shopping online or using apps. It\u2019s important to use strong, unique passwords \u2013 which haven\u2019t been used by anyone else \u2013 to protect our personal information and money. This helps prevent us being scammed when a fraudster, or other online criminal, guesses our passwords and uses it to steal our money.<\/p>\n\n\n\n<div class=\"wp-block-uagb-inline-notice uagb-inline_notice__align-left uagb-block-415a695e\"><button class=\"uagb-notice-close-button\" type=\"button\" aria-label=\"Close\"><\/button><h4 class=\"uagb-notice-title\"><strong>Signs of a stolen password:<\/strong><\/h4><div class=\"uagb-notice-text\">\n<p>If you are unable to log in  or Strange messages or emails are sent from your account that you don&#8217;t recognise.<\/p>\n\n\n\n<p><strong><em>Change your password right away if this happens.<\/em><\/strong><\/p>\n<\/div><\/div>\n\n\n\n<p><\/p>\n\n\n\n<h3 class=\"wp-block-heading\">Top Tips for creating a strong password:<\/h3>\n\n\n\n<ol class=\"wp-block-list\">\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Use three random words<\/strong><br>Firstly, pick three unrelated words, like \u201c<strong>redhousemonkeys<\/strong>.\u201d Random words are harder for scammers to guess than numbers or special characters.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Add capital letters and numbers<\/strong><br>Secondly, include one or two capital letters and numbers, e.g. &#8220;<strong>rEdhousemon6eys<\/strong>.&#8221;<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Use symbols<\/strong><br>Finally, add one or two special characters (i.e. symbols) like !@#$=%+ to replace a letter or letters, e.g., &#8220;<strong>rEdhou#emon6eys<\/strong>.&#8221; This is now a strong password. The final password needs to be between 12 and 20 characters long, with no spaces.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Additional tips for creating super strong passwords<\/strong>:<\/h3>\n\n\n\n<ol start=\"1\" class=\"wp-block-list\">\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Avoid personal details <\/strong>that could be easily guessed like family or pet names, your favourite sports team or holiday destination, your address, phone numbers, birthdays, National Insurance numbers, musicians or fictional characters such as Batman, Tigger or Harry Potter.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Don\u2019t use obvious words<\/strong> like \u201cpassword\u201d, \u201clogin\u201d, \u201cfootball\u201d, \u201cregister\u201dor the account name (e.g. &#8220;amazon&#8221; or \u201cFacebook\u201d).<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Avoid using obvious substitutions <\/strong>that just look similar to letters such as \u201c5\u201d for \u201cS\u201d, \u201c@\u201d for \u201ca\u201d, \u201c1 instead of I\u201d or the number zero instead of the letter O.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Don\u2019t use number sequences<\/strong> like &#8220;1234 or 4567&#8221;.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Use different passwords<\/strong> for different accounts so if you get hacked on one account, it won\u2019t affect your other accounts.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Always use a separate and strong password for your email.<\/strong><\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>Write passwords down<\/strong> and store them safely, or use a password manager to generate and store your passwords. Alternatively, you can save your passwords on a web browser such Chrome or Safari but only on your own device \u2013 and bear in mind if your device itself is stolen and hacked, it would be easy for the thief to access your accounts if the passwords are stored in your browser.<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong><u>Never<\/u> share passwords<\/strong> with others, even if they ask for the information. Keep this personal information confidential, safe and secure. A scammer might ask you for your password \u2013 do not provide it!<\/li>\n\n\n\n<li style=\"padding-top:var(--wp--preset--spacing--30);padding-bottom:var(--wp--preset--spacing--30)\"><strong>If you do get hacked on an account and a hacker gets your private details, including your password, <\/strong>then it is important to change your password on that account straightaway, and on any other account that you use that password for.<\/li>\n<\/ol>\n\n\n\n<h3 class=\"wp-block-heading\"><br><strong>Using Two-Factor Authentication (2FA)<\/strong> <strong>or Multi-Factor Authentication<\/strong> <strong>(MFA)<\/strong><\/h3>\n\n\n\n<p>Some apps offer two-factor authentication (2FA) which you can choose to switch on. 2FA adds an extra layer of security by asking for a one-time code, normally six digits long, sent via text, email or authenticator app after entering your password.<br><br>Once the verification code is entered, it will allow you to log in. The advantage is that it checks your identity one more time, and makes it harder for hackers to hack your mobile or computer.<\/p>\n\n\n\n<p>Also, some apps on certain devices permit fingerprint recognition or face scan as well, as a form of 2FA, or 2FA may take the form of a list of back-up codes to store safely and use once each.<\/p>\n\n\n\n<p>It is important to switch 2FA on if it&#8217;s an option or your email accounts such as Gmail, Outlook and AOL. You should also use it for Google, Amazon, Apple ID, Microsoft and for your banking, social media and online shopping. 2FA can also be called 2-step verification (2SV) or multi-factor authentication (MFA).<\/p>\n\n\n\n<h3 class=\"wp-block-heading\"><strong>Watch out for scams!<\/strong><\/h3>\n\n\n\n<p><strong>Scam 1: fake contact<\/strong><br>Scammers may contact you pretending to be from a trusted organisation (e.g. your bank, Amazon, Facebook, a shop, the NHS, HMRC, a government department etc.) asking for your password or personal details. This is a scam and they are not real representatives of that organisation.<\/p>\n\n\n\n<p>They might even say they are contacting you because you have been scammed. This itself is a scam. They may use the phone number of your bank or account, but it is still a scam. A shop, account or bank would never contact you to ask you for your contact details such as your password. They would not contact you in this way to tell you that you have been scammed. You should never respond to this type of contact and do not give them your password, pin no, or personal details. Your passwords must remain confidential and only known to you.<\/p>\n\n\n\n<p><strong>Scam 2: fake links<\/strong><br>Another common scam is that they send you a text or email that has a link to a fake scam website that looks real but isn\u2019t. This website then tricks you into revealing your password. The website might have poor spelling, or be linked to a surprise email or text that you weren\u2019t expecting.<\/p>\n\n\n\n<p>Avoid clicking on links from unexpected messages. Instead, it is better to go to the official website to get the contact details and then contact the organisation directly yourself, rather than responding to a strange text or email, or answering a phone call, all of which are likely to be scams.<br><\/p>\n\n\n\n<div class=\"wp-block-uagb-info-box uagb-block-0b044708 uagb-infobox__content-wrap  uagb-infobox-icon-above-title uagb-infobox-image-valign-top wp-block-uagb-info-box--has-margin\"><div class=\"uagb-infobox-margin-wrapper\"><div class=\"uagb-ifb-content\"><div class=\"uagb-ifb-icon-wrap\"><svg xmlns=\"https:\/\/www.w3.org\/2000\/svg\" viewBox=\"0 0 512 512\"><path d=\"M352 256C352 278.2 350.8 299.6 348.7 320H163.3C161.2 299.6 159.1 278.2 159.1 256C159.1 233.8 161.2 212.4 163.3 192H348.7C350.8 212.4 352 233.8 352 256zM503.9 192C509.2 212.5 512 233.9 512 256C512 278.1 509.2 299.5 503.9 320H380.8C382.9 299.4 384 277.1 384 256C384 234 382.9 212.6 380.8 192H503.9zM493.4 160H376.7C366.7 96.14 346.9 42.62 321.4 8.442C399.8 29.09 463.4 85.94 493.4 160zM344.3 160H167.7C173.8 123.6 183.2 91.38 194.7 65.35C205.2 41.74 216.9 24.61 228.2 13.81C239.4 3.178 248.7 0 256 0C263.3 0 272.6 3.178 283.8 13.81C295.1 24.61 306.8 41.74 317.3 65.35C328.8 91.38 338.2 123.6 344.3 160H344.3zM18.61 160C48.59 85.94 112.2 29.09 190.6 8.442C165.1 42.62 145.3 96.14 135.3 160H18.61zM131.2 192C129.1 212.6 127.1 234 127.1 256C127.1 277.1 129.1 299.4 131.2 320H8.065C2.8 299.5 0 278.1 0 256C0 233.9 2.8 212.5 8.065 192H131.2zM194.7 446.6C183.2 420.6 173.8 388.4 167.7 352H344.3C338.2 388.4 328.8 420.6 317.3 446.6C306.8 470.3 295.1 487.4 283.8 498.2C272.6 508.8 263.3 512 255.1 512C248.7 512 239.4 508.8 228.2 498.2C216.9 487.4 205.2 470.3 194.7 446.6H194.7zM190.6 503.6C112.2 482.9 48.59 426.1 18.61 352H135.3C145.3 415.9 165.1 469.4 190.6 503.6V503.6zM321.4 503.6C346.9 469.4 366.7 415.9 376.7 352H493.4C463.4 426.1 399.8 482.9 321.4 503.6V503.6z\"><\/path><\/svg><\/div><div class=\"uagb-ifb-title-wrap\"><h3 class=\"uagb-ifb-title\"><strong>Useful links<\/strong><\/h3><\/div><p class=\"uagb-ifb-desc\">This information is taken from the National Cyber Security Centre:<strong><a href=\"http:\/\/www.ncsc.gov.uk\/\">www.ncsc.gov.uk.<\/a> <\/strong><br>Also see information on fraud at: <strong><a href=\"http:\/\/www.actionfraud.police.uk\/\">www.actionfraud.police.uk.<\/a><\/strong><\/p><\/div><\/div><\/div>\n\n\n\n<p><\/p>\n","protected":false},"featured_media":156,"template":"","meta":{"_acf_changed":false,"_uag_custom_page_level_css":"","site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}}},"class_list":["post-136","client-blog","type-client-blog","status-publish","has-post-thumbnail","hentry"],"acf":[],"uagb_featured_image_src":{"full":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956.jpg",500,334,false],"thumbnail":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956-150x150.jpg",150,150,true],"medium":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956-300x200.jpg",300,200,true],"medium_large":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956.jpg",500,334,false],"large":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956.jpg",500,334,false],"1536x1536":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956.jpg",500,334,false],"2048x2048":["https:\/\/clients-dev.transformhousing.org.uk\/wp-content\/uploads\/2026\/02\/Safe-passwords-main-pic_1-e1771945442956.jpg",500,334,false]},"uagb_author_info":{"display_name":"admin","author_link":"https:\/\/clients-dev.transformhousing.org.uk\/?author=0"},"uagb_comment_info":0,"uagb_excerpt":"Nowadays, we need passwords for lots of things, like shopping online or using apps. It\u2019s important to use strong, unique [&hellip;]","_links":{"self":[{"href":"https:\/\/clients-dev.transformhousing.org.uk\/index.php?rest_route=\/wp\/v2\/client-blog\/136","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/clients-dev.transformhousing.org.uk\/index.php?rest_route=\/wp\/v2\/client-blog"}],"about":[{"href":"https:\/\/clients-dev.transformhousing.org.uk\/index.php?rest_route=\/wp\/v2\/types\/client-blog"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/clients-dev.transformhousing.org.uk\/index.php?rest_route=\/wp\/v2\/media\/156"}],"wp:attachment":[{"href":"https:\/\/clients-dev.transformhousing.org.uk\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=136"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}