 TITLE: How Reusing Passwords Can Lead to Online Attacks CONTENT: How to Protect Yourself From Credential Stuffing\n------------------------------------------------\nCredential stuffing attacks are effective because consumers tend to reuse the same usernames and passwords across online sites. In fact, 81% of consumers report using the same credentials across multiple accounts. With that knowledge, cyber criminals can use your credentials to attempt to get into any number of your accounts, including bank accounts, credit card accounts and more.\nWhile it may not be possible to completely protect your information from a credential stuffing attack, following these steps will make it more difficult for cyber thieves to steal your information.\n1.  **Check to see if your data has been compromised.** You can check your free Experian credit report for errors or suspicious accounts. You can also run a free dark web scan as well to find out whether information like your Social Security number, phone number or email addresses is on the dark web. Two other free services that can tell you whether your personal data was part of a breach are Have I Been Pwned, where you can check whether your email address has been compromised, and Pwned Passwords to see whether your passwords have been exposed.\n2.  **Use unique passwords for every account.** It's simple, but it's also the most important action you can take: Do not reuse passwords across accounts. It may be tempting to recycle passwords for convenience, but it makes identity theft a lot easier for hackers. See Experian's guide to secure passwords.\n3.  **Consider using a password manager.** The average internet user has more than 200 digital accounts that require passwords, according to password management firm Dashlane, and they predict this number will double to 400 in the next five years. Managing that many passwords often leads consumers to fall back on simple and previously used passwords across multiple sites. Instead, consider using a password manager like LastPass, 1Password or Dashlane to keep track of all your passwords securely. You can always do it the old fashioned way and write them down too.\n4.  **Use multi-factor authentication.** Using two-factor authentication these days is a must. This added security feature requires a unique code to be sent by a text message, a phone call or an email to allow you to log in to your account after entering your password. Even if your password is stolen, it prevents others from being able to log in to your account without the code.\n5.  **Delete unused accounts.** If you haven't deleted an old social network account or email account you never use, you may want to. The more accounts you have open, the higher chance that you'll recycle an old password by mistake. Do an audit of the accounts you no longer use and determine whether there are some that you can delete.\nYou may also want to take time to learn more about identity theft issues and how to protect your personal information along with what to do after a data breach.\nWhile credential stuffing shows no signs of going away, taking steps to secure your online personal information will give you an added layer of protection when data breaches occur. END