Most breaches do not happen because of a "genius hacker," but because of a weak password, a reused password, or an old leak. Protection starts by reducing potential damage.
- 1. Unique password for each account
- 2. Passphrases
- 3. Two-step verification
- 4. Password manager
- 5. Protect your PIN
- 6. In case of a breach
- 7. Use NexTab
- 8. Common mistakes
1. Unique password for each account
Reusing a password means that a single leak on a small site could expose your important accounts: email, bank, and work accounts. Use a different password for each account, especially accounts that contain sensitive data or payment methods.
If remembering many passwords is difficult, this is a good reason to use a password manager, not a reason to reuse a single password.
2. Use a passphrase, not a short complex word
A word like P@ssw0rd! looks strong but is short and easy to guess. A passphrase like "morning-coffee-with-an-old-book" is longer, easier to remember, and harder to guess. Combine 4 to 6 unrelated words, and add a number or symbol if you want.
- Do not use personal information that can be found on your social media accounts.
- Do not literally use a famous song or quote.
- Do not share the passphrase with anyone, even if they seem trustworthy.
- Change the password immediately if it appears in a known leak.
3. Enable two-step verification
Even if someone knows your password, two-step verification (2FA) adds a layer of protection. Use an authentication app or a security key instead of text messages whenever possible, because text messages are weaker against certain attacks.
Keep your recovery codes in a safe place, because losing your phone may prevent you from accessing your account.
4. Use an encrypted password manager
A password manager stores your passwords in an encrypted vault, fills them in automatically, and generates strong passwords. The basic idea: remember one strong master password, and the manager remembers the rest.
Choose a reliable manager, and enable two-step verification on the manager account itself. Do not put all your passwords in a text file or an unencrypted note on your phone.
5. Protect your PIN code and your device
If you use a local vault like NexTab, the PIN code is your key. Do not share it, and do not write it on a sticky note on your screen. Use a relatively long code, and enable the screen lock on your device.
In NexTab, the vault data on your device is encrypted using AES-GCM, and the key is derived from the PIN code via PBKDF2. The PIN code is not sent to the server nor stored. If you forget the PIN code, you may not be able to recover the encrypted data — so keep a secure backup of your important information.
6. What to do in case of a breach?
- Immediately change the password of the affected account.
- Change the same password on any other account that uses it.
- Review active login sessions and close any you do not recognize.
- Activate two-step verification if it is not enabled.
- Check the email associated with the account and the recovery methods.
- Monitor any suspicious activity or phishing messages.
7. Use the NexTab vault
NexTab encrypted passwords in NexTab allow you to save your sensitive notes in a vault protected by a PIN code. Key features:
- Local encryption before saving data.
- The PIN code does not leave your device.
- Simple interface on phone and computer.
- The ability to sync the encrypted version via your account without sending the PIN code.
Start by entering only two important accounts, then gradually add the rest. Do not try to transfer everything in one day.
8. Common mistakes
- One password for everything: The most dangerous digital habit.
- Short complex passwords: Length is more important than random symbols.
- Sharing verification codes: No one needs your 2FA code, even if they claim to be support.
- Storing passwords in unencrypted notes: Any app that can read notes can read them.
- Ignoring updates: Updating your browser and system closes known vulnerabilities.
- Falling for phishing: Check the site address before entering your password.
15-minute plan
- 5 minutes: Make a list of your top 5 accounts.
- 5 minutes: Change the password of your most important account to a unique passphrase.
- 5 minutes: Enable two-step verification on your email and bank.
Repeat the steps for two accounts each week until you cover your main accounts. You don’t need to fix everything today.
Open your encrypted vault
Save your sensitive notes in NexTab, with local encryption and a PIN code that never leaves your device.
Open passwordsFrequently Asked Questions
Is the NexTab vault secure?
The vault uses AES-GCM encryption and a key derived from the PIN code via PBKDF2. The PIN code is not stored on the server. But security also depends on the strength of the PIN code and the protection of your device.
What if I forget the PIN code?
We cannot recover it because we do not have it. You will need the recovery data or to recreate the vault. Keep a secure backup of critical information.
Can I sync the vault across devices?
The encrypted version can be synced via your account, but the PIN code remains on your device and is not sent. You will need to enter the PIN code on the other device to decrypt it.
Do I need another password manager?
Not necessarily. If NexTab meets your needs, use it. The important thing is that the vault is encrypted and the PIN code is protected.