5 best practices for family passwords

At a glance

• Decide who needs access to each account. Think about all the online accounts your family uses and put them into categories, such as personal, school, household and parent-only accounts.
• Use a password manager to create and store unique passwords. Give each online account its own long, hard-to-guess password, so a stolen gaming password won’t also unlock your child’s email.
• Keep recovery information somewhere secure that you can reach if a device is lost. For example, print out your recovery codes and store them in a locked drawer at home so losing your phone doesn’t mean losing your access.

“Dad, what’s the password to my Roblox account?”

As a professor of instructional technology, I understand the importance of cybersecurity and password management. But as a dad, I also know that the most secure system in the world isn’t very useful if it’s too complicated for a family to maintain.

Managing family passwords doesn’t have to be overwhelming. A few practical habits can help protect your family’s accounts while making everyday life a little easier.

Here are five password best practices my family uses to manage passwords and keep our accounts more secure.

1. Sort out which accounts your family uses.

Your child may have a personal gaming account, a school account and a personal email address. Meanwhile, your family might share a streaming or music subscription. Before deciding how to manage the passwords, start with a simple inventory: Which accounts exist, who manages them and which email address is associated with each one?

Separate them into a few basic categories:

• Personal accounts: Email, gaming profiles, social media and other accounts that belong to a specific family member.
• School accounts: Learning platforms, school email and educational services.
• Household accounts: Streaming subscriptions, shopping accounts and other services used by the family.
• Parent-only accounts: Financial services, payment methods and accounts that require adult oversight.

Not every account that uses a password needs to be shared. Each person should have their own account whenever a service supports it, so they have the access they need without creating unnecessary security risks.

Pro tip: If you create an email address for a child or use one to register for online services, make sure you can access the email when needed. You might need to sign in to keep the account active or recover one of your child’s other accounts.

2. Give each account its own strong, hard-to-guess password.

It’s tempting to create one memorable password and use it everywhere. It’s also tempting to use a child’s birthday, a pet’s name or a favorite sports team.

The problem is that personal details may be easy for someone to discover through social media, public information or conversations. And if you reuse a password, a breach at one service can put your accounts at other services at risk too.

Every account should have its own strong password. That doesn’t mean you have to invent and remember a new one every time. A password manager can do that work for you.

3. Use a password manager to keep track.

A password manager securely stores your passwords in a password vault. You use one strong master password to access it, and the manager can generate unique, complex passwords for each account and fill them in when needed.

Look for a reputable password manager that supports the devices your family uses. If you need to share access to household accounts, look for a manager with shared vaults or folders. Those features can help organize shared logins without giving family members access to everything in your vault.

The goal here isn’t to create another complicated technology routine. It’s to make the secure choice the easy choice.

4. Add protection beyond a password.

Two-factor authentication, often called 2FA, combines two different types of proof that it’s you—for example, your password and a code from an authentication app on your phone.

This extra step can make it much harder for someone to access an account using a stolen password. Not all methods offer the same level of protection, but using a well-supported second factor is generally better than relying on a password alone.

Start with your family’s most important accounts: primary email, your password manager, financial services and accounts that can be used to reset passwords elsewhere.

You can also consider passkeys when websites and apps offer them. A passkey lets you sign in using a credential on your device, which you unlock with a fingerprint, face recognition or a PIN. Passkeys can be easier to use than traditional passwords and are designed to resist common phishing attacks.

Before setting up either option, understand how you’ll regain access if a device is lost or replaced.

5. Make a backup plan before you need it.

One lesson my family has learned the hard way: A security system that only exists in your head can eventually cause problems.

Keep your logins and passwords somewhere secure. A password manager is the best place to store this information, but a handwritten log kept secure and out of sight can be a useful backup. Keep recovery codes somewhere secure that you can still access if your phone is lost or you’re locked out of the account. Keep your account inventory there too so you know who manages each account and which email address it uses.

Teach kids a few basic password security rules.

The goal isn’t to manage every login forever. As children grow up, gradually involve them in managing their own accounts so they develop habits they can carry into adulthood.

Here are a few basic rules you can teach early:

• Keep passwords private. Don’t share them with friends or strangers.
• Use unique passwords. Each account should have its own. A password manager can help you create and keep track of them.
• Deny unexpected login requests. If you aren’t trying to sign in, don’t approve a request.
• Report suspicious activity. Ask your child to come to you when something seems wrong with an account so you can work through it together.

Make password security a family habit.

Protecting your family’s accounts doesn’t have to become another source of stress. Start small, then make these steps part of your family’s regular digital routine.

Password management may not seem exciting, but it can make a real difference for your family — especially the next time someone asks, “Dad, what’s the login?”

Keeping up with the whole family just got easier with Verizon Family Plus.

Learn more about our Verizon Loyalty Program for all.