Avoid Password Reuse

Password reuse is the practice of using the same password across multiple accounts or services for convenience. However, this habit can increase your security risk. If one service suffers a data breach and your password is exposed, attackers may try the same email/username and password combination on other services.

Use a unique password for every account.

Use long passwords, preferably at least 12 characters.

Use a combination of letters, numbers, and symbols where appropriate and required by the service.

Avoid easily guessed information such as names, birth dates, phone numbers, or common words.

Store and manage passwords securely using a company-approved password manager.

Avoid storing passwords in unsecured notes, chats, or documents.

Do not reuse old passwords or passwords used for other accounts.

When entering passwords in public places, make sure your screen cannot be viewed by others.

Enable MFA on supported accounts, especially company and critical accounts.

Use an organization-approved authenticator app, such as Microsoft Authenticator or Google Authenticator.

Never share your OTP, verification code, or MFA approval with anyone.

If you receive an unexpected MFA request, do not approve it and report it immediately.

Make sure your passwords are not reused across different services.

If you become aware of a breach, change the affected password immediately.

If the same password was used on other accounts, change those passwords as well.

Use trusted or company-approved services to check for potential data exposure.

If you notice signs of a compromised account, exposed password, suspicious MFA request, or any other cybersecurity incident, immediately report it to the IT SOC (Security Operations Center) through the ticketing system: