October is Cyber Security Awareness Month, and this year we’re spotlighting the “Core 4” habits that help keep your organisation safe online:
- Spotting and reporting scams
- Using strong passwords and password managers
- Enabling multi-factor authentication (MFA)
- Keeping software up to date
This week, we’re focusing on password security which is still one of the most effective ways to protect your digital life, even in the age of artificial intelligence.
Why Passwords Still Matter
Passwords are the keys to almost everything online, from banking and healthcare records to work systems and social media accounts. And yet, weak or reused passwords remain one of the easiest ways for cyber criminals to break in.
It’s not that people don’t care. It’s that remembering dozens of complex, unique passwords is a nightmare. So many fall back on using the same one across multiple accounts, or tweaking it slightly each time. Unfortunately, attackers know this, and they’re getting smarter at exploiting it.
What Makes a Password Strong?
A strong password isn’t just about complexity. It’s about being unpredictable. Here’s what to aim for:
- Length: At least 16 characters
- Complexity: A mix of uppercase, lowercase, numbers and symbols
- Uniqueness: A different password for every account
These three traits make it far harder for attackers, even those using AI, to guess your credentials.
Why Password Managers Are Worth It
If you’re managing multiple sites, teams or systems, remembering every login is unrealistic. That’s where password managers come in.
These tools do more than just store passwords securely. They:
- Generate strong, random passwords for each account
- Autofill login details to save time
- Alert you if your credentials appear in a data breach
- Flag weak or reused passwords
- Offer secure sharing options for teams or families
For care providers juggling resident records and compliance systems, or M&E contractors managing client portals and supplier accounts, password managers reduce risk and save time.
How AI Is Changing the Game
Artificial intelligence is reshaping cyber security, for better and worse.
How Attackers Use AI
Cyber criminals are using AI to:
- Spot patterns in how people change passwords (like adding a year or swapping a symbol)
- Predict variations based on leaked credentials
- Run faster, more targeted attacks that test millions of combinations in seconds
If your password was “CareHome2023!”, AI could easily guess “CareHome2024!” or “CareHome23!”. That’s why small tweaks aren’t enough anymore.
How Defenders Use AI
Thankfully, AI is also helping us fight back. It’s being used to:
- Detect suspicious login behaviour, like access from unusual locations
- Monitor the dark web for stolen credentials
- Improve password strength ratings based on real-world attack data
Looking ahead, AI could even help phase out passwords altogether, with smarter authentication methods like behavioural biometrics.
What You Can Do Today
Improving password security doesn’t have to be complicated. Start with these steps:
- Use a password manager to create and store unique logins.
- Stop reusing or recycling old passwords. Even small changes are risky.
- Make passwords long. Aim for 16 characters or more.
-
Enable MFA wherever possible for an extra layer of protection.
Final Thought
AI has changed the password landscape. Weak or repeated passwords are now easier than ever to crack, but we also have better tools to protect ourselves.
As we mark Cyber Security Awareness Month, remember, strong passwords are still one of the simplest and most powerful ways to secure your business, your team and your clients.
Need help choosing a password manager or rolling out stronger password practices across your organisation? Get in touch, we’re here to support you.