High-Value Life GuideLife's expensive mistakes
中文

Policy, legal and insurance guides primarily concern mainland China. Scope and sources ↗

Back to the life guide

Use a unique password solely for your email

Original: eternity4719 · source details

Original author: eternity4719 · Chinese source: · English adaptation: parveen0029. Translation and grade notes ↗

Bibliographic titles are retained in their original language.

Source author's views and grades; not individually verified by this site.

Cost and benefit at a glance
Check the cost Cost ↓
No cost involved. Storing it in a password manager eliminates the need to memorize it. The real challenge lies in breaking the old habit of reusing one password…
Then the source benefit Benefit ↓
Credential stuffing is one of the easiest attack methods: attackers simply test stolen passwords against other accounts. If your email password is compromised, all accounts that re…

In plain terms

If a password you use elsewhere gets stolen, attackers can use it to log straight into your email account. Once they gain access to your email, they can reset passwords for any other accounts linked to it. Therefore, your email password must be unique and never reused anywhere else.

This guide's cartoon · show illustration
Chapter 14 editorial cartoon: One password to open every door? Enlarge illustration
One password to open every door?

Zoom in, then swipe to move around the picture.

Loading full-size illustration…

Editorial cartoon · Chapter 14One password to open every door?

Original illustration with Chinese lettering; the English dialogue is below. Humour is a reading aid, not evidence.

English dialogue
  • One password for everything?
  • So every door takes the same key?

Cost: what it takes

No cost involved. Storing it in a password manager eliminates the need to memorize it. The real challenge lies in breaking the old habit of reusing one password across multiple sites.

Benefit: what the source reports

Credential stuffing is one of the easiest attack methods: attackers simply test stolen passwords against other accounts. If your email password is compromised, all accounts that rely on it for password recovery become vulnerable too. The US Cybersecurity and Infrastructure Security Agency recommends using a distinct, strong password of at least 16 characters for every account, and storing it via a password manager.

Conditions, limits and disagreements

If you struggle to memorize passwords, use the built-in password manager in your web browser. It stores passwords for each site for you, which is far safer than reusing the same password everywhere. Avoid saving passwords in WeChat favorites or note-taking apps.

Original references

Original bibliographic titles and links are preserved; some titles are in Chinese.

Medical, legal, financial and policy conditions vary by person, place and time. Policy material primarily concerns mainland China; check the cited document and current local requirements.