- Published:
- Thursday 1 May 2025 at 1:39 pm

Stolen, weak or reused passwords are still the most common way hackers gain access to your online accounts.
Have you ever wondered what happens when stolen passwords get a second life? It’s called credential stuffing, a type of cybercrime where hackers use stolen usernames, emails and passwords from one website to try and access another.
Today is World Password Day – a timely reminder to strengthen your password habits and protect your personal information online.
If you reuse passwords across different accounts, one stolen password can put multiple accounts at risk.
Follow these three simple steps to reduce your risk:
- Step 1 – Use strong passwords that are difficult to guess, such as passphrases, to make it harder for hackers to break into your online accounts
- Step 2 - Use a unique password for each account to make sure hackers can’t access your other accounts if that password is stolen
- Step 3 – Store your unique passwords securely in a password manager application. This takes the guess work out of logging in to each of your accounts.
Good password habits are your first line of defence online. Learn more at www.vic.gov.au/passwords(opens in a new window).
And test the strength of a potential password or passphrase with our online tool at service.vic.gov.au/passtester(opens in a new window).
Updated