Make life harder for those that attack you via spam or phishing techniques! My advice is not just to use a Password Manager and use MFA/TOTP wherever you possibly can, but also to have a unique email address per account.

This results in new spam getting bounced immediately. I use Fastmail and their version of 'plus addressing' or use specific aliases (I own my own domains of course, and you can own one too to enable as many aliases as you might need) so that each account has not just a strong and unique password, but also has it's own individual email address at no extra cost.Īs an added bonus, its easy enough to set an email address so that it stops working if it was disclosed in a breach and is starting to get unwarranted levels of spam - Fastmail have a great feature associated with aliases which allows you to just set up an alias (if you are using the plus addressing piece) and disable that alias. My solution is both very simple, as well as also exponentially more secure than just using a Password Manager. Password Managers are all well and good, but how do you know which company has been part of a breach and as a result you are now getting spammed like crazy against the email address? As a family we are on the 'Families' plan which is a very cost effective way of getting MFA/TOTP codes working for all of us at home. While on that subject, my favourite password manager for many years now is Bitwarden. It's also very true, they are great at helping in this way!

This is based on a fundamental concept of having a different (and long and totally randomised!) password per account. So recently I've seen a lot of posts from people pointing out that password managers are great at helping with securing multiple personal (or work!) accounts.

Bitwarden totp