Quick wins for a faster PC:
Scan for outdated or missing drivers - takes under a minuteDriver Scan →Clear out junk files and repair common Windows errorsFree Scan →Use a different password for every account, store those passwords in a password manager, and turn on multifactor authentication (MFA)—starting with your email and financial accounts. If a service supports passkeys or FIDO/WebAuthn security keys, consider using one; otherwise, an authenticator app is a practical choice. These steps make account takeover harder, but no single setting guarantees safety.
Secure the accounts that can unlock the others first
Start with the email account you use to reset other passwords. Someone who controls that inbox may be able to reset access to other services. Next, protect financial accounts, then social, shopping, and other accounts that matter to you. CISA’s consumer guidance recommends strong, unique passwords and MFA as core account protections: Secure Our World.
As an Amazon Associate I earn from qualifying purchases.
Replace reused passwords with unique ones
If you reuse a password, a credential exposed from one service may be tried on another. A distinct password for every account limits that cross-account exposure. NIST recommends password managers as a way to generate and store unique passwords: NIST: How Do I Create a Good Password?.
Recommended Free Tools
Set up a password manager
-
Choose a password manager that can generate strong passwords, store them securely, and protect your manager account with MFA.
#1 Best Overall
Yubico - YubiKey 5 NFC - Multi-Factor authentication (MFA) Security Key and passkey, Connect via USB-A or NFC, FIDO Certified - Protect Your Online Accounts- POWERFUL SECURITY KEY: The YubiKey 5 NFC is the most versatile physical passkey, protecting your digital life from phishing attacks. It ensures only you can access your accounts
- WORKS WITH 1000+ ACCOUNTS: Compatible with popular accounts like Google, Microsoft, and Apple. A single YubiKey 5 NFC secures 100+ of your favorite accounts, including email, password managers, and more
- FAST & CONVENIENT LOGIN: Plug in your YubiKey 5 NFC via USB and tap it, or tap it against your phone (NFC), to authenticate. No batteries, no internet connection, and no extra fees required
- MOST SECURE PASSKEY: Supports FIDO2/WebAuthn, FIDO U2F, Yubico OTP, OATH-TOTP/HOTP, Smart card (PIV), and OpenPGP. That means it’s versatile, working almost anywhere you need it
- PRIMARY & SPARE KEYS: Just like having a spare house key, we recommend buying two YubiKeys - one for daily use and one as a spare. That way you’ll never get locked out of your accounts
-
Create a strong, memorable master passphrase for the manager. Do not reuse a password you already use elsewhere.
-
Turn on MFA for the manager account, using the strongest method it supports and that you can reliably use.
-
Generate a separate password for each account as you update it, and save the recovery codes somewhere separate and secure.
Recommended: Crashes or Glitches? A Free Driver Scan Usually Finds the Culprit →Recommended: Fix Windows Errors and Clear Junk Files in Minutes - Free Scan →Recommended: Update Every Outdated Driver on Your PC in One Scan - Free →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Change passwords in priority order
Replace reused passwords first, then passwords known or suspected to be exposed, followed by credentials for accounts that can reset or recover access to other services. Change a password promptly if you have evidence it was compromised. There is no need to change every password on an arbitrary schedule; NIST advises against routine forced changes in its verifier requirements.
Turn on MFA, choosing the strongest usable option
MFA requires another authentication step in addition to a password. It can help protect an account if its password is compromised. CISA’s guidance for small and medium businesses says, “Strong passwords help, but they are no longer enough to keep accounts and systems safe when used alone.” Its comparison places physical security keys highest among the methods it lists, with text and email codes as weaker fallbacks: CISA: Require Multifactor Authentication.
Enable MFA in each account
-
Sign in and open the service’s account, security, or sign-in settings. Exact labels and setup flows differ by service.
-
Choose the service’s MFA or two-step verification option and follow its official setup instructions.
Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.Rank #2
Thetis Pro For Business - FIDO2 Security Key L1 MFA & NFC Passkey Access For School ERP, Employee Online Account, Compatible with Coinbase Google Workspace Apple ID Window Salesforce,Dual USB A +USB C- FIDO2 & Passkey Ready: Business-ready and FIDO2 L1 certified. This key is supported by major management suites and is ideal for both individual and enterprise deployment. Works seamlessly with Gmail, Facebook, GitHub, Dropbox, Coinbase, and more.
- Dedicated Manager App: Use the Thetis Manager App for the initial hardware PIN setup. Setting the PIN on the device first ensures a smooth registration process. Once the PIN is configured, you can begin registering the key across your favorite FIDO2-compatible online services.
- Universal Connectivity (USB-C, USB-A, & NFC): Designed for PCs, Macs, iPhones, and Android. For mobile use, simply unfold the key, align it with your phone’s NFC antenna, and hold for a few seconds to authenticate.
- Enhanced MFA (FIDO2 & TOTP/HOTP): Strengthen your security with flexible options. Use the Manager App to access TOTP/HOTP features for accounts that do not yet support FIDO2.
- Check FIDO2 compatibility before purchase - Known limitations: ID Austria is not supported (requires FIDO2 Level 2). Windows Hello login only works with Windows Enterprise editions that support Entra ID. NFC is supported only through mobile authentication, Not MacOS/windows.
-
Prefer a passkey or FIDO/WebAuthn security key if the service offers one and it works with your devices. If not, choose an authenticator app when available; use SMS or email codes if those are the available options rather than leaving MFA off.
-
Save recovery codes securely, separate from the device used to approve sign-ins. Add a second recovery method if the service permits it.
-
Test that you can sign in with the new method and understand how to recover access if your device is lost.
How the methods differ
|
Method |
Phishing resistance |
Device and recovery considerations |
When to use it |
|---|---|---|---|
|
Passkey or FIDO/WebAuthn security key |
Stronger option: NIST identifies passkeys and FIDO/WebAuthn as phishing-resistant approaches. NIST also states, “Passwords are not phishing-resistant.” Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
|
Passkeys may be bound to one device or synchronized, depending on implementation. A physical key must be available at sign-in; plan a secure spare or another recovery route if the service supports it. |
Use when offered and compatible with your account and devices. Check the service’s supported standards and your device’s requirements. |
|
Authenticator-app code |
Manually entered one-time codes are not phishing-resistant: an attacker may relay a code to the real service. Rank #3
Kensington VeriMark NFC+ USB‑C Security Key, FIDO2/WebAuthn Hardware Authenticator for Passwordless Login, Works with Windows, macOS & Chrome OS, K64739WW
|
Codes depend on access to the enrolled device or a properly configured replacement. Keep the service’s recovery codes separately. Free tools Windows power users keep installed One-click scans. No signup required. Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
|
A practical fallback when a passkey or security key is unavailable. |
|
Number matching |
CISA lists it as an alternative MFA method; it is not the phishing-resistant choice identified by NIST for passkeys and FIDO/WebAuthn. |
Requires access to the device receiving the prompt. Follow the service’s recovery process if that device is lost. |
Use if the service offers it and stronger options are unavailable or unsuitable. The Tool Desk Outbyte Driver Updater FREEScan for outdated or missing drivers - takes under a minuteDriver Scan →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
|
|
SMS or email code |
CISA places text and email codes among its weaker listed methods; manually entered codes are not phishing-resistant. |
Access depends on the phone number or email account receiving the code, so protect those recovery channels too. Rank #4
Sale
Thetis Nano-A FIDO2 Security Key Hardware Passkey Device with USB Type A, TOTP/HOTP, FIDO2.0 Two Factor Authentication 2FA MFA, Works with Windows/mac/iOS/Android/Linux/Gmail/Facebook/GitHub/Coinbase
|
Use when this is the service’s available option rather than leaving MFA off. |
Method availability and recovery details vary by service. For NIST’s technical treatment of authenticators and phishing resistance, see NIST SP 800-63B-4, Authenticators.
Understand the password-length guidance
NIST SP 800-63B-4 is a standard for digital identity services, not a checklist every website follows. Its verifier requirements say single-factor passwords must be at least 15 characters; a verifier may allow passwords of eight or more characters when they are used as part of MFA. NIST advises against additional composition rules and routine forced password changes, while requiring a change when there is evidence of compromise. Individual services may impose different limits or rules, so follow their setup requirements.
Keep recovery possible without weakening sign-in
-
Store recovery codes in a secure location separate from your everyday sign-in device and password manager account.
-
Check that recovery email addresses and phone numbers are current and that you can access them.
-
Where supported, configure a second recovery method so losing one device does not leave you locked out.
Windows Errors? Fix Them Before They Spread
Repair common Windows errors and clear accumulated junk for a smoother, more stable PC - no reinstall needed.Free scan · no reinstallCrashes, No Sound, or Screen Glitches?
Random freezes, missing sound and display glitches usually trace back to one bad driver. Find and replace yours safely.Free scan · under a minuteSpecial offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy. -
Before replacing or wiping a device, follow the service’s instructions for transferring or re-enrolling your authentication method.
For a physical security key, verify that the account supports its standard and that the key’s connector or wireless capability works with your devices. No single key is guaranteed to work with every account or device.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
