Threatle: Protect Your Accounts from Password Reuse and MFA Risks

Even the strongest password can be risky if you use it for more than one login. When credentials from one service are exposed, criminals can automatically try the same username and password elsewhere. This is credential stuffing: one breach becomes a route into several accounts.

Strong, unique credentials and multifactor authentication turn stolen information into a much less useful key.

Use a unique password for every important account

Give every important account a different password or passphrase and use an approved password manager to generate and store them. That removes the task of remembering dozens of complex passwords while limiting the damage if one service is compromised.

Add multi-factor authentication

Add multi-factor authentication (MFA) wherever it is available, especially for email, finance, work systems and your password manager. MFA requires another factor in addition to the password, making a stolen password less useful. If your organisation offers a specific approved method, follow that guidance. Read CISA’s guidance on how multi-factor authentication adds protection to business accounts.

Practise your recall with Threatle

Threatle is Prventi’s cyber security awareness word game. You have six attempts to identify a five-letter security term. After the game, a report explains the term and links to the relevant learning module in Prventi. After reading the explanation, try describing the term in your own words. If it relates to passwords, check whether your important accounts use unique passwords and multi-factor authentication. Return during the week to practise again.

👉 Test your recall. Play Threatle.