What is the correct password management practice?

• A. Rotate passwords every month and reuse familiar phrases.
• B. Use strong, unique passwords; do not reuse; change regularly; use manager or MFA; do not share.
• C. Share passwords with teammates for convenience.
• D. Use the same password across all systems.

Answer: (B)

Good password management means using long, random, unique passwords for every account, storing them securely, and protecting access with an extra factor such as MFA. This approach prevents a breach of one site from compromising others, because each password is distinct and not guessable. A password manager makes it practical to generate and remember strong passwords, so you don’t have to reuse or write them down. Enabling multi-factor authentication adds a second line of defense, making unauthorized access much harder even if a password is somehow exposed. Sharing passwords with teammates undermines confidentiality and creates unnecessary risk, while using the same password across multiple systems or relying on predictable phrases makes passwords easy to crack. Regular changes are useful when there’s reason to doubt security, but the most important parts are unique, strong passwords for every service, safeguarded by a password manager and MFA, with no sharing.