Information Security

The Most Secure Password is a Passphrase

Passwords like 123456 may be simple to use, but they are also easy for hackers to guess. In fact, according to CyberNews.com, 123456 is the most used password in 20231. Approximately 44 million accounts are vulnerable to account takeover because of compromised or stolen passwords2. Don’t make it easy for cyber criminals to hack your accounts.

What can you do to make your passwords more secure? Replace simple passwords with stronger, longer passphrases. A passphrase is a unique set of words that serves as a password. Passphrases are much easier to remember, but much more difficult for cyber criminals to crack.

To create a secure, unique, and memorable passphrase:

1. Think of a phrase that you will remember (e.g., Be CyberSafe).

2. Change specific letters into special characters or numbers (e.g., “B3_Cyb3rS*f3”).

3. Add a unique identifier to further differentiate your passwords across accounts. (e.g., “B3_
Cyb3rS*f3_w0^k”).

Also, here are some things to avoid when choosing a passphrase:

n Never use personal information, such as family names or birthdays.

n Do not use repeated letters or characters like “aaaa” or “11111.”

USPS® passwords or passphrases must be 15 characters in length for all internal platforms except mobile devices. They must contain a combination of characters, including at least three of the following:

n One uppercase letter (A-Z).

n One lowercase letter (a-z).

n One number (0-9).

For guidance about creating strong, secure passphrases, see Handbook AS-805, Information Security, at blue.usps.gov/cpim/ftp/manage/as8002210/as8002210_tech_005.htm.

For more information about cybersecurity best practices, visit blue.usps.gov/cyber or liteblue.usps.gov/cyber.