[et_pb_section fb_built=”1″ _builder_version=”4.27.4″ _module_preset=”default” custom_padding=”||65px|||” global_colors_info=”{}”][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2026\/02\/NCSS-3397-Bulletin-Header-Footer-Header-Graphic-1600×350-Compressed.png” title_text=”NCSS-3397-Bulletin-Header-Footer-Header Graphic 1600×350-Compressed” _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}”]<\/p>\n
Published: May 1, 2026<\/em><\/p>\n <\/em><\/p>\n Our bulletin Cyber Threat Watch<\/em><\/strong> has been created to help small businesses stay up to date on the latest threats, news, and events affecting their business. The content has been curated to make cybersecurity easy and accessible for both technical and nontechnical readers.<\/p>\n [\/et_pb_text][et_pb_heading title=”Featured Cyber News \u2014 Protecting Your Accounts and Devices: Common Guidance on Passwords” _builder_version=”4.27.6″ _module_preset=”default” title_level=”h2″ title_font=”|600|||||||” title_text_color=”#00688E” global_colors_info=”{}”][\/et_pb_heading][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2026\/05\/ncss-31-lock.jpg” title_text=”ncss-31-lock” _builder_version=”4.27.6″ _module_preset=”default” global_colors_info=”{}”][\/et_pb_image][et_pb_text module_class=”ncss-table” _builder_version=”4.27.6″ _module_preset=”default” header_3_text_color=”#00688E” global_colors_info=”{}”]<\/p>\n Each year, World Password Day serves as a reminder to review how accounts and sensitive information are protected. Guidance from the National Institute of Standards and Technology (NIST)<\/a> and the Cybersecurity and Infrastructure Security Agency (CISA)<\/a> continues to emphasize strong, unique passwords and multi-factor authentication (MFA)<\/a> as baseline security practices.<\/span><\/p>\n Today, most account compromises involve passwords that are stolen through phishing or reused across multiple accounts, which allows a compromised password to be used to access other accounts. Therefore, improving security requires more than updating password rules alone.<\/span><\/p>\n Passwords remain a key part of protecting accounts but have limitations. Even strong passwords can be exposed through data breaches. Once a password is compromised, attackers can often use it across multiple accounts.<\/span><\/p>\n Recommended practices from NIST and CISA reflect the following layered approach and form the baseline for protecting accounts:<\/span><\/p>\n In addition to the above, password-free sign-in options, often called passkeys<\/a>, are becoming more widely available. These allow users to sign in using device-based verification such as a fingerprint, facial recognition, or PIN. Because this method works only with the legitimate website or application, it helps prevent users from entering login information into fake websites while eliminating password reuse.<\/span><\/p>\n Beyond the baseline practices, current recommendations<\/a> place greater emphasis on strengthening how access is verified to reduce the risk of account compromise.<\/span><\/p>\n These recommendations focus on the following:<\/span><\/p>\n These steps build on existing practices while reflecting a broader approach to protecting accounts for everyday use.<\/span><\/p>\n [\/et_pb_text][et_pb_image src=”https:\/\/nationalcybersecuritysociety.org\/wp-content\/uploads\/2026\/05\/ncss-passkey-31.jpg” title_text=”ncss-passkey-31″ _builder_version=”4.27.6″ _module_preset=”default” custom_margin=”27px|||||” global_colors_info=”{}”][\/et_pb_image][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_3_text_color=”#00688E” hover_enabled=”0″ custom_css_free_form=”ol {|| list-style: none !important; || counter-reset: item; ||}||||ol li {|| counter-increment: item; || position: relative; || padding-left: 2em; \/* Adjust as needed for spacing *\/||}||||ol li::before {|| content: counter(item) %22.%22; || font-weight: bold; || position: absolute;|| left: 0; || width: 1.5em; || text-align: right;||}” global_colors_info=”{}” sticky_enabled=”0″]<\/p>\n Small businesses can take the following practical steps to strengthen account security.<\/p>\n World Password Day highlights the importance of maintaining strong password practices as a foundation for account security. At the same time, current guidance reflects a broader shift toward strengthening how access is verified and reducing reliance on passwords alone. By applying these practical steps, small businesses can better protect their accounts.<\/p>\n The NCSS encourages businesses to adopt comprehensive security practices and stay informed about evolving technology trends. We recommend you consider becoming an NCSS member to access a wide range of our services. For more information, visit our Small Business page<\/a><\/span>.<\/p>\n [\/et_pb_text][\/et_pb_column][\/et_pb_row][et_pb_row _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”|auto|-44px|auto||” custom_padding=”71px||0px|||” locked=”off” global_colors_info=”{}”][et_pb_column type=”4_4″ _builder_version=”4.27.4″ _module_preset=”default” global_colors_info=”{}”][et_pb_divider _builder_version=”4.27.4″ _module_preset=”default” custom_margin=”||-2px|||” locked=”off” global_colors_info=”{}”][\/et_pb_divider][et_pb_text _builder_version=”4.27.6″ _module_preset=”default” header_2_font=”|600|||||||” header_2_text_color=”#00688E” custom_margin=”||2px|||” custom_padding=”||0px|||” global_colors_info=”{}”]<\/p>\n <\/a><\/p>\n https:\/\/nonprofitcyber.org\/common-guidance-on-passwords\/<\/a><\/p>\n https:\/\/www.staysafeonline.org\/articles\/password-managers<\/a><\/p>\n https:\/\/www.staysafeonline.org\/articles\/what-to-do-if-your-password-manager-is-breached<\/a><\/p>\n https:\/\/www.nytimes.com\/wirecutter\/reviews\/password-manager-tips\/<\/a><\/p>\n https:\/\/www.ncsc.gov.uk\/passkeyshttps:\/\/www.ncsc.gov.uk\/blogs\/passkeys-are-more-secure-than-traditional-ways-to-log-in<\/a><\/p>\n https:\/\/www.ncsc.gov.uk\/news\/ncsc-leave-passwords-in-the-past-passkeys-are-the-future<\/a><\/p>\n https:\/\/www.ibm.com\/think\/topics\/phishing-resistant-mfa<\/a><\/p>\nHow Account Protection Is Evolving<\/h3>\n
\n
How Current Practices Are Enhanced<\/h3>\n
\n
Practical Steps to Strengthen Account Security<\/h3>\n
\n
Conclusion<\/h3>\n
References<\/span><\/strong><\/h2>\n